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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.270013][ T5555] loop3: detected capacity change from 0 to 512 [ 821.279482][ T5555] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.294063][ T5555] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.317276][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 821.351501][ T5558] loop3: detected capacity change from 0 to 512 03:40:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.360630][ T5558] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.375248][ T5558] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 821.396035][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.430959][ T5561] loop3: detected capacity change from 0 to 512 [ 821.440988][ T5561] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.455533][ T5561] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.512148][ T5564] loop3: detected capacity change from 0 to 512 [ 821.524023][ T5564] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.540925][ T5564] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="92851176f3df4a9a4e1b2f912b87a6c6a96aec4af7668f5bd21491334fc95fb835ca64c5e399f26d2c0821db141944b514b04b5d6825566382a88d84efdb775446e6f98b4bb1dcef239745a5d171d0eec5b69b9a37a1859fec3aadca44d2685629fd49f3a530ac9645f062e4a683553b2a5701f09a7b1cb1fb850f40c0adb086267db8453704d47c3ddbaab55e5e5a6ee3b994584486a8778454334f25035cbfb9b92671d18eaaa56a7f225e1cbe1ac08bb064b0fcd5e9b9bb269cd3a308dc98b52c7a2ac705804dc777a7e4b4961e3a4fbbe3b627d2890626f2d1a79c591e7c557a126790411bd03948da1f43cbed675761139c82827a80511a9d25128daba7ae9904442289a9e6d6b94d1b6a8e31e256986ca1372ab24a84acba92ca65c7e6b82a38cc9931e21cd8da7d26afbbf8db323a96aad90819b66dbdb02c0ffb27d90513c834ea6acec3dc31f401e608791492fa2b2e41c7a5e54af1b8ac2d9e468d7e99cfb4605b52c13d1faf026c7cf12cf707de37f82c55189bcaa1f12ba871f1113aa57c990fe35eda5e67e89ae038cb475ea4f390eb8ccaf447f16d6a5b9af3f3324cf7e4d1867c141856fa9a121b437eeaa5379c6a59430290168b8cbaba79df6ec73a82e3ff1e22ea950c7f0106188515854a1fc45419a1c6e1c64bd037c02f423006f4d23c8a82f4e19d8578fb4bdedb8bf3a30e0bde10e390088b4e008a9cec39937049ce3cb47bda96b728bda861aa7ee1b187591efddac3b14ae2b0db29f75a8d516915b3f648f974b2210e5b49e982ecbb2c3866befc66c920efac454bb086e807eb768f41b9118d937f20d03cd5eec5b50bf36485f42c3abe0ce20c9aa3701f0e8b61f3017a83e434d465f0f76be4c71af0b624d6cf53fecbcb3526f65bccc2d0ea9a8220bda5b50b6f5e86a15d980da1f072660767e356c311347eb240e9efa46ddbaf623aecc3de3a4a5fa98ecc8498697173b6c2e29acd02694441c7de4b6749019f336575bc0fe1f5e5d1e05e61b69f95faa3322a56b92f872d953d5bbd4ff44191f54c7c4024a53f1a7ac49a758c9d4ac1deb54307a1e138b404054d5d814eb3765e3242acc7a60e8b3b009c366859028962504f7d9e94c073d5dbd546e732d52195a4bf7848691c00960cae8160db703ca5c7ef96ced19d64d65c50122dd6fd72ae991baa950e5604a75e4c086a826bc8a9dede231a3e27ce6a4119104f5ef1c91dd20f97c8efef39a40744a749c0d6e6a0bc0d4d49fbba1d1a30377df8fc0d8fff54f502bac4a768618c06a6caeaa1083fd1e9b5b13349649a6991827870b34e97fc69c95e3d26c678dd6f2bb6495226a11be71a6125c7c9f978432de0eb2bae9366c54f17be2e604c20ffd677bd619c69d457a06581d20720765cf87099fe6f590a1bc436f2fbcf8c3931eba8dbbf36d8e6b9e69bbe9833"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) clock_gettime(0x2, &(0x7f0000000000)) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.620896][ T5569] loop3: detected capacity change from 0 to 512 [ 821.630525][ T5569] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.646681][ T5569] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 821.693603][ T5573] loop3: detected capacity change from 0 to 512 [ 821.703644][ T5573] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.718568][ T5573] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 821.760390][ T5578] loop3: detected capacity change from 0 to 512 [ 821.769815][ T5578] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.784311][ T5578] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:34 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x0, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 821.965150][ T5582] loop3: detected capacity change from 0 to 512 [ 821.974291][ T5582] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 821.990733][ T5582] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:34 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3b8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 822.120270][ T5589] loop3: detected capacity change from 0 to 512 [ 822.132948][ T5589] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.147508][ T5589] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 822.192841][ T5594] loop3: detected capacity change from 0 to 512 [ 822.203523][ T5594] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.219763][ T5594] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 822.283292][ T5597] loop3: detected capacity change from 0 to 512 [ 822.293966][ T5597] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.308753][ T5597] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:34 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 822.458858][ T5602] loop3: detected capacity change from 0 to 512 [ 822.469050][ T5602] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.483628][ T5602] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:35 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 822.551224][ T5607] loop3: detected capacity change from 0 to 512 [ 822.561018][ T5607] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.580162][ T5607] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 822.622225][ T5611] loop3: detected capacity change from 0 to 512 [ 822.631432][ T5611] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.646381][ T5611] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 822.711552][ T5614] loop3: detected capacity change from 0 to 512 [ 822.720936][ T5614] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 822.735580][ T5614] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:35 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x0, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:35 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:35 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 822.973899][ T5619] loop3: detected capacity change from 0 to 512 [ 822.995608][ T5619] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.010267][ T5619] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe1c}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 823.057534][ T5626] loop3: detected capacity change from 0 to 512 [ 823.067413][ T5626] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.082233][ T5626] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 823.130942][ T5629] loop3: detected capacity change from 0 to 512 [ 823.141021][ T5629] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.155756][ T5629] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:35 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 823.313050][ T5632] loop3: detected capacity change from 0 to 512 [ 823.322430][ T5632] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.337393][ T5632] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:35 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) clock_gettime(0x2, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 823.411798][ T5640] loop3: detected capacity change from 0 to 512 [ 823.420770][ T5640] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.435591][ T5640] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0e}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 823.473453][ T5644] loop3: detected capacity change from 0 to 512 [ 823.482929][ T5644] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.497679][ T5644] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 823.545811][ T5648] loop3: detected capacity change from 0 to 512 [ 823.556160][ T5648] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.570916][ T5648] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:36 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x0, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:36 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4788}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:36 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 823.839489][ T5653] loop3: detected capacity change from 0 to 512 [ 823.870193][ T5653] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 823.892464][ T5653] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 823.916955][ T5653] EXT4-fs mount: 394 callbacks suppressed [ 823.916971][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4888}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 823.973741][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.999286][ T5660] loop3: detected capacity change from 0 to 512 [ 824.008650][ T5660] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.023367][ T5660] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.036208][ T5660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.066760][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.091635][ T5663] loop3: detected capacity change from 0 to 512 [ 824.100968][ T5663] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:36 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.115729][ T5663] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.128196][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.163969][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.192711][ T5668] loop3: detected capacity change from 0 to 512 03:40:36 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) clock_gettime(0x2, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.202761][ T5668] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 824.217248][ T5668] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.230229][ T5668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.272119][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.325498][ T5675] loop3: detected capacity change from 0 to 512 [ 824.334894][ T5675] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 824.353111][ T5675] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.367567][ T5675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.396593][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.422380][ T5678] loop3: detected capacity change from 0 to 512 [ 824.431316][ T5678] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.446459][ T5678] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.459274][ T5678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.487225][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.512762][ T5681] loop3: detected capacity change from 0 to 512 [ 824.522048][ T5681] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:37 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x0, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 824.537017][ T5681] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.549489][ T5681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.588315][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:37 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8848}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:37 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 824.705076][ T5686] loop3: detected capacity change from 0 to 512 [ 824.722096][ T5686] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 824.738242][ T5686] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb803}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.750900][ T5686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.778279][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe200}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 824.803240][ T5693] loop3: detected capacity change from 0 to 512 [ 824.812458][ T5693] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 824.827229][ T5693] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.839944][ T5693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.864030][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.888065][ T5696] loop3: detected capacity change from 0 to 512 [ 824.899445][ T5696] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 824.914007][ T5696] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 824.926565][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.951624][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:37 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb01}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.025881][ T5699] loop3: detected capacity change from 0 to 512 [ 825.047016][ T5699] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 825.061418][ T5699] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:37 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) clock_gettime(0x2, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.076314][ T5699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.120486][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.147974][ T5707] loop3: detected capacity change from 0 to 512 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.157733][ T5707] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 825.172402][ T5707] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 825.186468][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.201422][ T5707] __nla_validate_parse: 31 callbacks suppressed [ 825.201435][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.228617][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.252923][ T5711] loop3: detected capacity change from 0 to 512 [ 825.262388][ T5711] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.277159][ T5711] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 825.289635][ T5711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.307522][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.327399][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.351816][ T5714] loop3: detected capacity change from 0 to 512 [ 825.361156][ T5714] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:37 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x0, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 825.375910][ T5714] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 825.388648][ T5714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.406706][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.426407][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:38 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.503870][ T5719] loop3: detected capacity change from 0 to 512 [ 825.513670][ T5719] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 825.528572][ T5719] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 825.541066][ T5719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 03:40:38 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.558815][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.603437][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.629684][ T5726] loop3: detected capacity change from 0 to 512 [ 825.639239][ T5726] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.654603][ T5726] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 825.667181][ T5726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.688742][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.711379][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.734894][ T5729] loop3: detected capacity change from 0 to 512 [ 825.744056][ T5729] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 825.758722][ T5729] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 825.771716][ T5729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.787876][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.805050][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:38 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 825.883837][ T5732] loop3: detected capacity change from 0 to 512 [ 825.905374][ T5732] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 825.921909][ T5732] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:38 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) clock_gettime(0x2, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 825.934836][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.955913][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 826.010111][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.046422][ T5740] loop3: detected capacity change from 0 to 512 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.057021][ T5740] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.071625][ T5740] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.084364][ T5740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.100173][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 826.117993][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.143473][ T5744] loop3: detected capacity change from 0 to 512 [ 826.153035][ T5744] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.167826][ T5744] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.180478][ T5744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.198128][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 826.216420][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.242083][ T5747] loop3: detected capacity change from 0 to 512 [ 826.251720][ T5747] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:38 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 826.266774][ T5747] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.279797][ T5747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.308748][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:38 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.325892][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.378634][ T5754] loop3: detected capacity change from 0 to 512 [ 826.388451][ T5754] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.403023][ T5754] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:38 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 826.417588][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.492241][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.521109][ T5759] loop3: detected capacity change from 0 to 512 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.530706][ T5759] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.545970][ T5759] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.558572][ T5759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.583601][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.609116][ T5762] loop3: detected capacity change from 0 to 512 [ 826.618523][ T5762] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.632940][ T5762] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.645817][ T5762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.677303][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.705248][ T5765] loop3: detected capacity change from 0 to 512 03:40:39 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 826.714681][ T5765] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.731273][ T5765] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.744031][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 03:40:39 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) clock_gettime(0x2, &(0x7f0000000000)) 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.791782][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.850759][ T5772] loop3: detected capacity change from 0 to 512 [ 826.859926][ T5772] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.876252][ T5772] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.889658][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.917243][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 826.941529][ T5777] loop3: detected capacity change from 0 to 512 [ 826.951092][ T5777] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 826.965699][ T5777] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 826.978458][ T5777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.010168][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.034696][ T5780] loop3: detected capacity change from 0 to 512 [ 827.043938][ T5780] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.060150][ T5780] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 827.072764][ T5780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 03:40:39 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 827.101796][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:39 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.221060][ T5787] loop3: detected capacity change from 0 to 512 [ 827.243977][ T5787] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.258682][ T5787] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:39 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0e0000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.271266][ T5787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.336334][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.391997][ T5792] loop3: detected capacity change from 0 to 512 [ 827.404671][ T5792] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.421327][ T5792] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.438900][ T5792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.463737][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.490679][ T5795] loop3: detected capacity change from 0 to 512 [ 827.500041][ T5795] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.514576][ T5795] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 827.527033][ T5795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.555931][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.581832][ T5798] loop3: detected capacity change from 0 to 512 [ 827.591024][ T5798] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:40 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 827.605780][ T5798] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 827.618766][ T5798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 03:40:40 executing program 5: clock_settime(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="92851176f3df4a9a4e1b2f912b87a6c6a96aec4af7668f5bd21491334fc95fb835ca64c5e399f26d2c0821db141944b514b04b5d6825566382a88d84efdb775446e6f98b4bb1dcef239745a5d171d0eec5b69b9a37a1859fec3aadca44d2685629fd49f3a530ac9645f062e4a683553b2a5701f09a7b1cb1fb850f40c0adb086267db8453704d47c3ddbaab55e5e5a6ee3b994584486a8778454334f25035cbfb9b92671d18eaaa56a7f225e1cbe1ac08bb064b0fcd5e9b9bb269cd3a308dc98b52c7a2ac705804dc777a7e4b4961e3a4fbbe3b627d2890626f2d1a79c591e7c557a126790411bd03948da1f43cbed675761139c82827a80511a9d25128daba7ae9904442289a9e6d6b94d1b6a8e31e256986ca1372ab24a84acba92ca65c7e6b82a38cc9931e21cd8da7d26afbbf8db323a96aad90819b66dbdb02c0ffb27d90513c834ea6acec3dc31f401e608791492fa2b2e41c7a5e54af1b8ac2d9e468d7e99cfb4605b52c13d1faf026c7cf12cf707de37f82c55189bcaa1f12ba871f1113aa57c990fe35eda5e67e89ae038cb475ea4f390eb8ccaf447f16d6a5b9af3f3324cf7e4d1867c141856fa9a121b437eeaa5379c6a59430290168b8cbaba79df6ec73a82e3ff1e22ea950c7f0106188515854a1fc45419a1c6e1c64bd037c02f423006f4d23c8a82f4e19d8578fb4bdedb8bf3a30e0bde10e390088b4e008a9cec39937049ce3cb47bda96b728bda861aa7ee1b187591efddac3b14ae2b0db29f75a8d516915b3f648f974b2210e5b49e982ecbb2c3866befc66c920efac454bb086e807eb768f41b9118d937f20d03cd5eec5b50bf36485f42c3abe0ce20c9aa3701f0e8b61f3017a83e434d465f0f76be4c71af0b624d6cf53fecbcb3526f65bccc2d0ea9a8220bda5b50b6f5e86a15d980da1f072660767e356c311347eb240e9efa46ddbaf623aecc3de3a4a5fa98ecc8498697173b6c2e29acd02694441c7de4b6749019f336575bc0fe1f5e5d1e05e61b69f95faa3322a56b92f872d953d5bbd4ff44191f54c7c4024a53f1a7ac49a758c9d4ac1deb54307a1e138b404054d5d814eb3765e3242acc7a60e8b3b009c366859028962504f7d9e94c073d5dbd546e732d52195a4bf7848691c00960cae8160db703ca5c7ef96ced19d64d65c50122dd6fd72ae991baa950e5604a75e4c086a826bc8a9dede231a3e27ce6a4119104f5ef1c91dd20f97c8efef39a40744a749c0d6e6a0bc0d4d49fbba1d1a30377df8fc0d8fff54f502bac4a768618c06a6caeaa1083fd1e9b5b13349649a6991827870b34e97fc69c95e3d26c678dd6f2bb6495226a11be71a6125c7c9f978432de0eb2bae9366c54f17be2e604c20ffd677bd619c69d457a06581d20720765cf87099fe6f590a1bc436f2fbcf8c3931eba8dbbf36d8e6b9e69bbe9833"}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x4, 0x400}}, './file0\x00'}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0x3, 0x10008, 0xe55, 0x10, "1400978dee01002f6947023990f938e82a6071"}) 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.695055][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81ffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.743622][ T5806] loop3: detected capacity change from 0 to 512 [ 827.754620][ T5806] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.769413][ T5806] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 827.818752][ T5809] loop3: detected capacity change from 0 to 512 [ 827.827854][ T5809] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.842966][ T5809] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 827.891914][ T5812] loop3: detected capacity change from 0 to 512 [ 827.901706][ T5812] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 827.916547][ T5812] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:40 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:40 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 828.066694][ T5817] loop3: detected capacity change from 0 to 512 [ 828.076082][ T5817] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 828.092635][ T5817] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:40 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb8030000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 828.211363][ T5822] loop3: detected capacity change from 0 to 512 [ 828.231525][ T5822] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 828.248005][ T5822] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe2000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 828.298201][ T5827] loop3: detected capacity change from 0 to 512 [ 828.309235][ T5827] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 828.323973][ T5827] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 828.364336][ T5830] loop3: detected capacity change from 0 to 512 [ 828.373795][ T5830] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 828.388652][ T5830] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:41 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x4, 0x400}}, './file0\x00'}) 03:40:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="92851176f3df4a9a4e1b2f912b87a6c6a96aec4af7668f5bd21491334fc95fb835ca64c5e399f26d2c0821db141944b514b04b5d6825566382a88d84efdb775446e6f98b4bb1dcef239745a5d171d0eec5b69b9a37a1859fec3aadca44d2685629fd49f3a530ac9645f062e4a683553b2a5701f09a7b1cb1fb850f40c0adb086267db8453704d47c3ddbaab55e5e5a6ee3b994584486a8778454334f25035cbfb9b92671d18eaaa56a7f225e1cbe1ac08bb064b0fcd5e9b9bb269cd3a308dc98b52c7a2ac705804dc777a7e4b4961e3a4fbbe3b627d2890626f2d1a79c591e7c557a126790411bd03948da1f43cbed675761139c82827a80511a9d25128daba7ae9904442289a9e6d6b94d1b6a8e31e256986ca1372ab24a84acba92ca65c7e6b82a38cc9931e21cd8da7d26afbbf8db323a96aad90819b66dbdb02c0ffb27d90513c834ea6acec3dc31f401e608791492fa2b2e41c7a5e54af1b8ac2d9e468d7e99cfb4605b52c13d1faf026c7cf12cf707de37f82c55189bcaa1f12ba871f1113aa57c990fe35eda5e67e89ae038cb475ea4f390eb8ccaf447f16d6a5b9af3f3324cf7e4d1867c141856fa9a121b437eeaa5379c6a59430290168b8cbaba79df6ec73a82e3ff1e22ea950c7f0106188515854a1fc45419a1c6e1c64bd037c02f423006f4d23c8a82f4e19d8578fb4bdedb8bf3a30e0bde10e390088b4e008a9cec39937049ce3cb47bda96b728bda861aa7ee1b187591efddac3b14ae2b0db29f75a8d516915b3f648f974b2210e5b49e982ecbb2c3866befc66c920efac454bb086e807eb768f41b9118d937f20d03cd5eec5b50bf36485f42c3abe0ce20c9aa3701f0e8b61f3017a83e434d465f0f76be4c71af0b624d6cf53fecbcb3526f65bccc2d0ea9a8220bda5b50b6f5e86a15d980da1f072660767e356c311347eb240e9efa46ddbaf623aecc3de3a4a5fa98ecc8498697173b6c2e29acd02694441c7de4b6749019f336575bc0fe1f5e5d1e05e61b69f95faa3322a56b92f872d953d5bbd4ff44191f54c7c4024a53f1a7ac49a758c9d4ac1deb54307a1e138b404054d5d814eb3765e3242acc7a60e8b3b009c366859028962504f7d9e94c073d5dbd546e732d52195a4bf7848691c00960cae8160db703ca5c7ef96ced19d64d65c50122dd6fd72ae991baa950e5604a75e4c086a826bc8a9dede231a3e27ce6a4119104f5ef1c91dd20f97c8efef39a40744a749c0d6e6a0bc0d4d49fbba1d1a30377df8fc0d8fff54f502bac4a768618c06a6caeaa1083fd1e9b5b13349649a6991827870b34e97fc69c95e3d26c678dd6f2bb6495226a11be71a6125c7c9f978432de0eb2bae9366c54f17be2e604c20ffd677bd619c69d457a06581d20720765cf87099fe6f590a1bc436f2fbcf8c3931eba8dbbf36d8e6b9e69bbe9833"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb7e5, 0x18}, 0xc) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) [ 828.585491][ T5836] loop3: detected capacity change from 0 to 512 [ 828.609191][ T5836] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 828.643474][ T5836] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:41 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 828.879043][ T5845] loop3: detected capacity change from 0 to 512 03:40:41 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 828.921204][ T5845] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 828.961131][ T5845] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:41 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x14, 0x12, 0xaa, &(0x7f0000000600)="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"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb010000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001380)=""/4096) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) [ 829.075083][ T5855] loop3: detected capacity change from 0 to 512 [ 829.087622][ T5855] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 829.102182][ T5855] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:41 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) [ 829.361032][ T5864] loop3: detected capacity change from 0 to 512 03:40:41 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) [ 829.404252][ T5864] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 829.444185][ T5864] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:42 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:42 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:42 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:42 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:42 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) clock_gettime(0x5, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:42 executing program 5: clock_settime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) [ 829.943934][ T5883] loop3: detected capacity change from 0 to 512 [ 829.972711][ T5883] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 829.997854][ T5883] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:42 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:42 executing program 5: clock_settime(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 830.242063][ T5890] loop3: detected capacity change from 0 to 512 [ 830.259170][ T5890] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) [ 830.283654][ T5890] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 830.366096][ T5890] __nla_validate_parse: 23 callbacks suppressed [ 830.366110][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:43 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 830.619133][ T5902] loop3: detected capacity change from 0 to 512 [ 830.646524][ T5902] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:43 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) [ 830.698898][ T5902] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:43 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:43 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:43 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffea}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 830.749177][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 830.831536][ T5913] loop3: detected capacity change from 0 to 512 [ 830.840495][ T5913] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 830.857619][ T5913] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 830.879111][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:43 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:43 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x20, 0x75, 0xdf4}) 03:40:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 03:40:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) [ 831.151175][ T5919] loop3: detected capacity change from 0 to 512 [ 831.171509][ T5919] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) [ 831.206776][ T5919] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x0, 0x75, 0xdf4}) [ 831.253075][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:44 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:44 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x0, 0x75, 0xdf4}) 03:40:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:44 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 831.678332][ T5937] loop3: detected capacity change from 0 to 512 [ 831.713246][ T5937] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 831.729590][ T5937] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 831.753909][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:44 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x0, 0x75, 0xdf4}) 03:40:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20, 0x0, 0xdf4}) [ 832.011271][ T5946] loop3: detected capacity change from 0 to 512 [ 832.040112][ T5946] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000280)={0x20}) 03:40:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 832.061518][ T5946] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 832.099077][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 832.170769][ T5956] loop5: detected capacity change from 0 to 512 [ 832.180020][ T5956] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 832.182832][ T5959] loop3: detected capacity change from 0 to 512 [ 832.206510][ T5956] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 832.278452][ T5959] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 832.295575][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 832.309327][ T5959] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 832.352753][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:44 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:45 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:45 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) shutdown(r0, 0x0) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:45 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 832.566053][ T5965] loop3: detected capacity change from 0 to 512 [ 832.577370][ T5965] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 832.593633][ T5965] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 832.615685][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:45 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 832.867472][ T5974] loop3: detected capacity change from 0 to 512 [ 832.879636][ T5974] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 832.895393][ T5974] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 832.916863][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 832.978287][ T5980] loop3: detected capacity change from 0 to 512 [ 832.992525][ T5980] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.009885][ T5980] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 833.076252][ T5983] loop3: detected capacity change from 0 to 512 [ 833.086847][ T5983] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.101725][ T5983] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 833.157016][ T5986] loop3: detected capacity change from 0 to 512 [ 833.167624][ T5986] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.192514][ T5986] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:45 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 833.255360][ T5989] loop3: detected capacity change from 0 to 512 [ 833.265557][ T5989] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.281354][ T5989] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x9}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:45 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:45 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) shutdown(r0, 0x0) 03:40:45 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 833.364018][ T5994] loop3: detected capacity change from 0 to 512 [ 833.374081][ T5994] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.389016][ T5994] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xa}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 833.483191][ T6003] loop3: detected capacity change from 0 to 512 [ 833.492897][ T6003] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.507889][ T6003] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:46 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xb}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 833.725000][ T6007] loop3: detected capacity change from 0 to 512 [ 833.771461][ T6007] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 833.842873][ T6007] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 833.998228][ T6013] loop3: detected capacity change from 0 to 512 [ 834.018017][ T6013] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xf}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 834.037197][ T6013] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:46 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 834.104996][ T6016] loop3: detected capacity change from 0 to 512 [ 834.116403][ T6016] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 834.131218][ T6016] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x10}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:46 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:46 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) shutdown(r0, 0x0) [ 834.238178][ T6021] loop3: detected capacity change from 0 to 512 [ 834.251965][ T6021] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:46 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 834.312294][ T6021] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x11}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 834.471523][ T6031] loop3: detected capacity change from 0 to 512 [ 834.482277][ T6031] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 834.499008][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x13}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:47 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 834.582035][ T6034] loop3: detected capacity change from 0 to 512 [ 834.602223][ T6034] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x60}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 834.621836][ T6034] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 834.699110][ T6040] loop3: detected capacity change from 0 to 512 [ 834.728238][ T6040] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 834.767092][ T6040] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xe2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x1fb}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 834.898218][ T6043] loop3: detected capacity change from 0 to 512 [ 834.908020][ T6043] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 834.923692][ T6043] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:47 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x300}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 834.991691][ T6047] loop3: detected capacity change from 0 to 512 [ 835.002641][ T6047] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.017556][ T6047] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 835.095336][ T6052] loop3: detected capacity change from 0 to 512 [ 835.108105][ T6052] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.122766][ T6052] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:47 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x3b8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:47 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) 03:40:47 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 835.288519][ T6059] loop3: detected capacity change from 0 to 512 [ 835.310516][ T6059] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.328137][ T6059] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x500}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 835.416348][ T6065] loop3: detected capacity change from 0 to 512 [ 835.428324][ T6065] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.443449][ T6065] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:47 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 835.463865][ T6065] __nla_validate_parse: 17 callbacks suppressed [ 835.463880][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x600}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 835.575308][ T6071] loop3: detected capacity change from 0 to 512 [ 835.605327][ T6071] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x700}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 835.645507][ T6071] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 835.662742][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.715107][ T6074] loop3: detected capacity change from 0 to 512 [ 835.724463][ T6074] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.740991][ T6074] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x900}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 835.765627][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.809492][ T6077] loop3: detected capacity change from 0 to 512 [ 835.820871][ T6077] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.837728][ T6077] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xa00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 835.863304][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:48 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 835.914346][ T6080] loop3: detected capacity change from 0 to 512 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xb00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 835.959537][ T6080] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 835.974429][ T6080] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 835.996151][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.034162][ T6085] loop3: detected capacity change from 0 to 512 [ 836.043828][ T6085] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 836.060425][ T6085] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:48 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:48 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xc00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 836.078315][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:48 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 836.156867][ T6093] loop3: detected capacity change from 0 to 512 [ 836.184673][ T6093] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xe1c}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 836.199428][ T6093] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 836.214771][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.269503][ T6099] loop3: detected capacity change from 0 to 512 [ 836.280529][ T6099] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 836.296850][ T6099] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:48 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xf00}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 836.322098][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.363456][ T6102] loop3: detected capacity change from 0 to 512 [ 836.390179][ T6102] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 836.419793][ T6102] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 836.481614][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x1100}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 836.581619][ T6108] loop3: detected capacity change from 0 to 512 [ 836.607490][ T6108] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x1300}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 836.658399][ T6108] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 836.697889][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:49 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x1c0e}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 836.758595][ T6111] loop3: detected capacity change from 0 to 512 [ 836.770371][ T6111] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 836.794398][ T6111] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x4788}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:49 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 836.873011][ T6116] loop3: detected capacity change from 0 to 512 [ 836.884303][ T6116] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 836.901475][ T6116] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:49 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:49 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:49 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 837.000663][ T6119] loop3: detected capacity change from 0 to 512 03:40:49 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 837.048193][ T6119] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 837.084008][ T6119] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:49 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:49 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x4888}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:49 executing program 5: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 837.245069][ T6136] loop3: detected capacity change from 0 to 512 [ 837.284813][ T6136] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 837.325325][ T6136] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:50 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:50 executing program 5: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x5865}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 837.674677][ T6143] loop3: detected capacity change from 0 to 512 [ 837.708785][ T6143] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 837.760862][ T6143] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:50 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:50 executing program 5: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:50 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x6000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:50 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 837.934152][ T6154] loop3: detected capacity change from 0 to 512 [ 837.979231][ T6154] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 838.001067][ T6154] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:50 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:50 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x6558}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:50 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 838.083535][ T6161] loop3: detected capacity change from 0 to 512 [ 838.131638][ T6161] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 838.157290][ T6161] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:51 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:51 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x8100}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 838.591132][ T6174] loop3: detected capacity change from 0 to 512 [ 838.623693][ T6174] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 838.644478][ T6174] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:51 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:51 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x8847}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 838.822232][ T6184] loop3: detected capacity change from 0 to 512 [ 838.878482][ T6184] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 838.913737][ T6184] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:51 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 03:40:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x8848}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:51 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) 03:40:51 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) 03:40:51 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) [ 839.038260][ T6197] loop3: detected capacity change from 0 to 512 [ 839.093980][ T6197] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 839.127134][ T6197] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:52 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:52 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:52 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 03:40:52 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xb803}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:52 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 839.704103][ T6213] loop3: detected capacity change from 0 to 512 [ 839.749347][ T6213] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 839.783292][ T6213] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x6000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:52 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xe200}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 839.869543][ T6219] loop5: detected capacity change from 0 to 512 [ 839.887011][ T6219] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 839.903537][ T6219] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 03:40:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 839.958181][ T6224] loop3: detected capacity change from 0 to 512 [ 839.978940][ T6224] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 839.999438][ T6224] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 840.002149][ T6228] loop5: detected capacity change from 0 to 512 03:40:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xfb01}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 840.047781][ T6228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 840.065808][ T6228] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 03:40:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x1000000, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 840.106154][ T6231] loop3: detected capacity change from 0 to 512 [ 840.135717][ T6231] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 840.154516][ T6234] loop5: detected capacity change from 0 to 512 [ 840.163193][ T6231] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 840.184313][ T6234] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value [ 840.230692][ T6234] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 03:40:52 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:52 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x34000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 840.481026][ T6240] loop3: detected capacity change from 0 to 512 03:40:53 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:53 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x320, 0x90, 0x5002004a, 0x0, 0x90, 0x0, 0x288, 0x3c8, 0x3c8, 0x288, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1b0, 0x1f8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x2}}, @common=@inet=@recent1={{0x108}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x380) r1 = inotify_init1(0x800) dup3(r0, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 840.540159][ T6240] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 840.589252][ T6240] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x400300}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:53 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 840.677327][ T6240] __nla_validate_parse: 16 callbacks suppressed [ 840.677356][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 840.786356][ T6249] loop3: detected capacity change from 0 to 512 [ 840.817305][ T6249] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x1000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 840.834410][ T6249] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 840.857358][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 840.899929][ T6254] loop3: detected capacity change from 0 to 512 [ 840.913635][ T6254] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 840.932997][ T6254] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x2000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 840.973303][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 841.039463][ T6257] loop3: detected capacity change from 0 to 512 [ 841.052108][ T6257] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 841.070289][ T6257] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x3000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 841.111189][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 841.170301][ T6260] loop3: detected capacity change from 0 to 512 03:40:53 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x0, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) [ 841.217408][ T6260] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 841.256843][ T6260] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:53 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 841.361961][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x4000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:53 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:53 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 841.507893][ T6269] loop3: detected capacity change from 0 to 512 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 841.548622][ T6269] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 841.575278][ T6269] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:54 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x5000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 841.608783][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 841.674730][ T6281] loop3: detected capacity change from 0 to 512 [ 841.702730][ T6281] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 841.719823][ T6281] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 841.747412][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:54 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x0, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:54 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x6000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:54 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r4, r5/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000f1b86fdd8e67e700"/27, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open$cgroup(&(0x7f0000000840)={0x0, 0x80, 0x40, 0x6, 0x35, 0xa, 0x0, 0x7fffffffffffffff, 0x20100, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000800), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x81}, 0xffffffffffffffff, 0x0, r3, 0x6) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x18000, 0x0) socket$key(0xf, 0x3, 0x2) 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:54 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) [ 842.337291][ T6299] loop3: detected capacity change from 0 to 512 [ 842.378098][ T6299] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 842.401949][ T6299] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:55 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) 03:40:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x7000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 842.483164][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) [ 842.611197][ T6314] loop3: detected capacity change from 0 to 512 [ 842.640852][ T6314] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 842.669294][ T6314] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 842.750410][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:55 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x0, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:55 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) 03:40:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x8000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 843.113224][ T6323] loop3: detected capacity change from 0 to 512 [ 843.143360][ T6323] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 843.166160][ T6323] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:55 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x10000000, 0x8) shutdown(r0, 0x0) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) 03:40:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x9000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 843.226881][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:55 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) [ 843.330206][ T6332] loop3: detected capacity change from 0 to 512 [ 843.340029][ T6332] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 843.354806][ T6332] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 03:40:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xa000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:55 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) [ 843.452878][ T6342] loop3: detected capacity change from 0 to 512 [ 843.478630][ T6342] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 843.498388][ T6342] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:56 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {0x0, r2/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) 03:40:56 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:56 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 03:40:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xb000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 843.992197][ T6351] loop3: detected capacity change from 0 to 512 [ 844.028647][ T6351] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 844.045471][ T6351] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x18, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:56 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x0, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:40:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xc000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 844.177336][ T6359] loop3: detected capacity change from 0 to 512 [ 844.181955][ T6361] loop5: detected capacity change from 0 to 512 [ 844.194357][ T6359] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 844.209124][ T6361] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.5: corrupted in-inode xattr: overlapping e_value 03:40:56 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:56 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) (fail_nth: 1) [ 844.227124][ T6359] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 844.240499][ T6361] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 03:40:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xf000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 844.339900][ T6369] loop3: detected capacity change from 0 to 512 [ 844.344709][ T6367] FAULT_INJECTION: forcing a failure. [ 844.344709][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 844.359502][ T6367] CPU: 1 PID: 6367 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller #0 [ 844.368118][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 844.378200][ T6367] Call Trace: [ 844.381492][ T6367] [ 844.384447][ T6367] dump_stack_lvl+0xda/0x130 [ 844.389160][ T6367] dump_stack+0x15/0x20 [ 844.393367][ T6367] should_fail_ex+0x21f/0x230 [ 844.398084][ T6367] __should_failslab+0x92/0xa0 [ 844.402880][ T6367] should_failslab+0x9/0x20 [ 844.407462][ T6367] slab_pre_alloc_hook+0x38/0x180 [ 844.412513][ T6367] __kmem_cache_alloc_node+0x46/0x250 [ 844.417930][ T6367] ? alloc_pipe_info+0xaf/0x360 [ 844.422829][ T6367] kmalloc_trace+0x2a/0xa0 [ 844.427277][ T6367] alloc_pipe_info+0xaf/0x360 [ 844.431978][ T6367] splice_direct_to_actor+0x598/0x5f0 [ 844.437403][ T6367] ? do_splice_direct+0xe7/0x180 [ 844.442361][ T6367] ? do_splice_direct+0x180/0x180 [ 844.447427][ T6367] ? do_splice_direct+0x180/0x180 [ 844.452479][ T6367] do_splice_direct+0x104/0x180 [ 844.457360][ T6367] do_sendfile+0x3b8/0x950 [ 844.461836][ T6367] __x64_sys_sendfile64+0x110/0x150 [ 844.467052][ T6367] do_syscall_64+0x41/0xc0 [ 844.471569][ T6367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 844.477538][ T6367] RIP: 0033:0x7f5383fa4169 [ 844.482116][ T6367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.501749][ T6367] RSP: 002b:00007f5383317168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 844.510229][ T6367] RAX: ffffffffffffffda RBX: 00007f53840c3f80 RCX: 00007f5383fa4169 [ 844.518223][ T6367] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 844.526212][ T6367] RBP: 00007f53833171d0 R08: 0000000000000000 R09: 0000000000000000 03:40:57 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) (fail_nth: 2) [ 844.534197][ T6367] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 844.542189][ T6367] R13: 00007fff2911187f R14: 00007f5383317300 R15: 0000000000022000 [ 844.550178][ T6367] [ 844.567006][ T6369] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 844.610138][ T6369] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 844.689983][ T6373] FAULT_INJECTION: forcing a failure. [ 844.689983][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 844.703305][ T6373] CPU: 0 PID: 6373 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller #0 [ 844.712014][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 844.722085][ T6373] Call Trace: [ 844.725415][ T6373] [ 844.728362][ T6373] dump_stack_lvl+0xda/0x130 [ 844.732991][ T6373] dump_stack+0x15/0x20 [ 844.737186][ T6373] should_fail_ex+0x21f/0x230 [ 844.742041][ T6373] __should_failslab+0x92/0xa0 [ 844.746867][ T6373] should_failslab+0x9/0x20 [ 844.751460][ T6373] slab_pre_alloc_hook+0x38/0x180 [ 844.756654][ T6373] __kmem_cache_alloc_node+0x46/0x250 [ 844.762077][ T6373] ? __kmem_cache_alloc_node+0x18c/0x250 [ 844.767753][ T6373] ? alloc_pipe_info+0x1ca/0x360 [ 844.772744][ T6373] __kmalloc+0x95/0x1a0 [ 844.776957][ T6373] ? kmalloc_trace+0x2a/0xa0 [ 844.781573][ T6373] alloc_pipe_info+0x1ca/0x360 [ 844.786360][ T6373] splice_direct_to_actor+0x598/0x5f0 [ 844.791783][ T6373] ? security_file_permission+0x4f/0x70 [ 844.797357][ T6373] ? security_file_permission+0x5a/0x70 [ 844.802964][ T6373] ? do_splice_direct+0x180/0x180 [ 844.808035][ T6373] do_splice_direct+0x104/0x180 [ 844.812908][ T6373] do_sendfile+0x3b8/0x950 [ 844.817367][ T6373] __x64_sys_sendfile64+0x110/0x150 [ 844.822607][ T6373] do_syscall_64+0x41/0xc0 [ 844.827071][ T6373] ? irqentry_exit+0x12/0x40 [ 844.831848][ T6373] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 844.837769][ T6373] RIP: 0033:0x7f5383fa4169 [ 844.842247][ T6373] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.861882][ T6373] RSP: 002b:00007f5383317168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 844.870315][ T6373] RAX: ffffffffffffffda RBX: 00007f53840c3f80 RCX: 00007f5383fa4169 [ 844.878310][ T6373] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 03:40:57 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {0x0, r2/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) 03:40:57 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:40:57 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) (fail_nth: 3) 03:40:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x10000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 844.886301][ T6373] RBP: 00007f53833171d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.894285][ T6373] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 844.902298][ T6373] R13: 00007fff2911187f R14: 00007f5383317300 R15: 0000000000022000 [ 844.910288][ T6373] [ 844.988421][ T6380] FAULT_INJECTION: forcing a failure. [ 844.988421][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 844.996677][ T6381] loop3: detected capacity change from 0 to 512 [ 845.001835][ T6380] CPU: 0 PID: 6380 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller #0 [ 845.016388][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 845.026457][ T6380] Call Trace: [ 845.029751][ T6380] [ 845.032701][ T6380] dump_stack_lvl+0xda/0x130 [ 845.037356][ T6380] dump_stack+0x15/0x20 [ 845.041532][ T6380] should_fail_ex+0x21f/0x230 [ 845.046304][ T6380] __should_failslab+0x92/0xa0 [ 845.051155][ T6380] should_failslab+0x9/0x20 [ 845.055682][ T6380] slab_pre_alloc_hook+0x38/0x180 [ 845.060753][ T6380] ? kvmalloc_node+0x72/0x160 [ 845.065465][ T6380] __kmem_cache_alloc_node+0x46/0x250 [ 845.070887][ T6380] ? __kmem_cache_alloc_node+0x5/0x250 [ 845.076410][ T6380] ? kvmalloc_node+0x72/0x160 [ 845.081114][ T6380] __kmalloc_node+0x98/0x1a0 [ 845.085740][ T6380] kvmalloc_node+0x72/0x160 [ 845.090320][ T6380] seq_read_iter+0x14a/0x8f0 [ 845.094942][ T6380] ? mod_objcg_state+0x1b3/0x2c0 [ 845.099902][ T6380] ? __rcu_read_lock+0x35/0x50 [ 845.104734][ T6380] proc_reg_read_iter+0x10e/0x180 [ 845.109784][ T6380] generic_file_splice_read+0xe3/0x290 [ 845.115379][ T6380] ? fsnotify_perm+0x2f4/0x370 [ 845.120178][ T6380] ? direct_splice_read+0x540/0x540 [ 845.125479][ T6380] splice_direct_to_actor+0x25a/0x5f0 [ 845.129901][ T6381] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 845.130867][ T6380] ? do_splice_direct+0x180/0x180 [ 845.145456][ T6381] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 845.150033][ T6380] do_splice_direct+0x104/0x180 [ 845.167151][ T6380] do_sendfile+0x3b8/0x950 [ 845.171610][ T6380] __x64_sys_sendfile64+0x110/0x150 [ 845.176915][ T6380] do_syscall_64+0x41/0xc0 [ 845.181354][ T6380] ? irqentry_exit+0x12/0x40 [ 845.185980][ T6380] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 845.191897][ T6380] RIP: 0033:0x7f5383fa4169 [ 845.196314][ T6380] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.215988][ T6380] RSP: 002b:00007f5383317168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 845.224422][ T6380] RAX: ffffffffffffffda RBX: 00007f53840c3f80 RCX: 00007f5383fa4169 03:40:57 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (fail_nth: 1) 03:40:57 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x11000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:57 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) (fail_nth: 4) [ 845.233515][ T6380] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 845.241501][ T6380] RBP: 00007f53833171d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.249525][ T6380] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 845.257521][ T6380] R13: 00007fff2911187f R14: 00007f5383317300 R15: 0000000000022000 [ 845.265549][ T6380] [ 845.337579][ T6386] FAULT_INJECTION: forcing a failure. [ 845.337579][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 845.350290][ T6386] CPU: 1 PID: 6386 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller #0 [ 845.359103][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 845.369274][ T6386] Call Trace: [ 845.372573][ T6386] [ 845.375542][ T6386] dump_stack_lvl+0xda/0x130 [ 845.380263][ T6386] dump_stack+0x15/0x20 [ 845.384457][ T6386] should_fail_ex+0x21f/0x230 [ 845.389229][ T6386] __should_failslab+0x92/0xa0 [ 845.394037][ T6386] should_failslab+0x9/0x20 [ 845.398599][ T6386] slab_pre_alloc_hook+0x38/0x180 [ 845.403699][ T6386] kmem_cache_alloc_lru+0x54/0x260 [ 845.410146][ T6386] ? sock_alloc_inode+0x34/0xa0 [ 845.415116][ T6386] sock_alloc_inode+0x34/0xa0 [ 845.419835][ T6386] ? sockfs_init_fs_context+0x70/0x70 [ 845.425291][ T6386] alloc_inode+0x38/0x150 [ 845.429683][ T6386] new_inode_pseudo+0x17/0x70 [ 845.434407][ T6386] do_accept+0xde/0x3a0 [ 845.434977][ T6389] loop3: detected capacity change from 0 to 512 [ 845.438643][ T6386] ? proc_fail_nth_read+0x140/0x140 [ 845.438676][ T6386] ? vfs_write+0x646/0x780 [ 845.438758][ T6386] __sys_accept4+0x9b/0x110 [ 845.438783][ T6386] __x64_sys_accept4+0x53/0x60 [ 845.438810][ T6386] do_syscall_64+0x41/0xc0 [ 845.468543][ T6386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 845.474535][ T6386] RIP: 0033:0x7faac8acc169 [ 845.478972][ T6386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.498689][ T6386] RSP: 002b:00007faac7e3f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 845.507174][ T6386] RAX: ffffffffffffffda RBX: 00007faac8bebf80 RCX: 00007faac8acc169 [ 845.515207][ T6386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 845.523202][ T6386] RBP: 00007faac7e3f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.531240][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.539299][ T6386] R13: 00007ffc18cf34cf R14: 00007faac7e3f300 R15: 0000000000022000 [ 845.547297][ T6386] [ 845.568954][ T6389] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 845.594970][ T6389] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 845.652909][ T6392] FAULT_INJECTION: forcing a failure. [ 845.652909][ T6392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.666897][ T6392] CPU: 1 PID: 6392 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller #0 [ 845.675521][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 845.685599][ T6392] Call Trace: [ 845.688910][ T6392] [ 845.691866][ T6392] dump_stack_lvl+0xda/0x130 [ 845.696508][ T6392] dump_stack+0x15/0x20 [ 845.700735][ T6392] should_fail_ex+0x21f/0x230 [ 845.705479][ T6392] __alloc_pages+0x108/0x340 [ 845.710116][ T6392] alloc_pages+0x3e1/0x4e0 [ 845.714606][ T6392] append_pipe+0x182/0x2a0 [ 845.719065][ T6392] ? SEQ_printf+0x87/0xc0 [ 845.723455][ T6392] copy_pipe_to_iter+0x9b/0x140 [ 845.728338][ T6392] _copy_to_iter+0x1c7/0x940 [ 845.732950][ T6392] ? clock_was_set_work+0x20/0x20 [ 845.738017][ T6392] ? __virt_addr_valid+0x16a/0x1b0 [ 845.744039][ T6392] ? __check_object_size+0x363/0x520 [ 845.749427][ T6392] seq_read_iter+0x754/0x8f0 [ 845.754126][ T6392] proc_reg_read_iter+0x10e/0x180 [ 845.759276][ T6392] generic_file_splice_read+0xe3/0x290 [ 845.764787][ T6392] ? fsnotify_perm+0x2f4/0x370 [ 845.769606][ T6392] ? direct_splice_read+0x540/0x540 [ 845.774851][ T6392] splice_direct_to_actor+0x25a/0x5f0 [ 845.780329][ T6392] ? do_splice_direct+0x180/0x180 [ 845.785371][ T6392] do_splice_direct+0x104/0x180 [ 845.790249][ T6392] do_sendfile+0x3b8/0x950 [ 845.794734][ T6392] __x64_sys_sendfile64+0x110/0x150 [ 845.799982][ T6392] do_syscall_64+0x41/0xc0 [ 845.804431][ T6392] ? irqentry_exit+0x12/0x40 [ 845.809127][ T6392] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 845.815062][ T6392] RIP: 0033:0x7f5383fa4169 [ 845.819565][ T6392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.839198][ T6392] RSP: 002b:00007f5383317168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:40:58 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) (fail_nth: 5) 03:40:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x13000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:58 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {0x0, r2/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) 03:40:58 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 845.847643][ T6392] RAX: ffffffffffffffda RBX: 00007f53840c3f80 RCX: 00007f5383fa4169 [ 845.855676][ T6392] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 845.863687][ T6392] RBP: 00007f53833171d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.871683][ T6392] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 845.879677][ T6392] R13: 00007fff2911187f R14: 00007f5383317300 R15: 0000000000022000 [ 845.887765][ T6392] 03:40:58 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 845.994178][ T6402] FAULT_INJECTION: forcing a failure. [ 845.994178][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 845.995845][ T6394] FAULT_INJECTION: forcing a failure. [ 845.995845][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 846.006969][ T6402] CPU: 0 PID: 6402 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller #0 [ 846.006998][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 846.007011][ T6402] Call Trace: [ 846.007018][ T6402] [ 846.007026][ T6402] dump_stack_lvl+0xda/0x130 [ 846.007073][ T6402] dump_stack+0x15/0x20 [ 846.053775][ T6402] should_fail_ex+0x21f/0x230 [ 846.058493][ T6402] __should_failslab+0x92/0xa0 [ 846.063332][ T6402] should_failslab+0x9/0x20 [ 846.067859][ T6402] slab_pre_alloc_hook+0x38/0x180 [ 846.072921][ T6402] kmem_cache_alloc+0x58/0x260 [ 846.077782][ T6402] ? security_inode_alloc+0x32/0xd0 [ 846.083104][ T6402] security_inode_alloc+0x32/0xd0 [ 846.088231][ T6402] inode_init_always+0x3ff/0x440 [ 846.093205][ T6402] ? sockfs_init_fs_context+0x70/0x70 [ 846.098716][ T6402] alloc_inode+0x77/0x150 [ 846.103176][ T6402] new_inode_pseudo+0x17/0x70 [ 846.107988][ T6402] do_accept+0xde/0x3a0 [ 846.112189][ T6402] ? proc_fail_nth_read+0x140/0x140 [ 846.117415][ T6402] ? vfs_write+0x646/0x780 [ 846.121860][ T6402] __sys_accept4+0x9b/0x110 [ 846.126427][ T6402] __x64_sys_accept4+0x53/0x60 [ 846.131217][ T6402] do_syscall_64+0x41/0xc0 [ 846.135664][ T6402] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 846.141617][ T6402] RIP: 0033:0x7faac8acc169 [ 846.146102][ T6402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.165801][ T6402] RSP: 002b:00007faac7e3f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 846.174237][ T6402] RAX: ffffffffffffffda RBX: 00007faac8bebf80 RCX: 00007faac8acc169 [ 846.182227][ T6402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 846.190217][ T6402] RBP: 00007faac7e3f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 846.198207][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.206232][ T6402] R13: 00007ffc18cf34cf R14: 00007faac7e3f300 R15: 0000000000022000 [ 846.214281][ T6402] [ 846.217343][ T6394] CPU: 1 PID: 6394 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller #0 [ 846.225973][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 846.228632][ T6401] loop3: detected capacity change from 0 to 512 [ 846.236032][ T6394] Call Trace: [ 846.236042][ T6394] [ 846.236072][ T6394] dump_stack_lvl+0xda/0x130 [ 846.253181][ T6394] dump_stack+0x15/0x20 [ 846.257379][ T6394] should_fail_ex+0x21f/0x230 [ 846.262111][ T6394] __should_failslab+0x92/0xa0 [ 846.266937][ T6394] should_failslab+0x9/0x20 [ 846.271489][ T6394] slab_pre_alloc_hook+0x38/0x180 [ 846.276555][ T6394] ? splice_from_pipe+0xd0/0xd0 [ 846.281424][ T6394] __kmem_cache_alloc_node+0x46/0x250 [ 846.286844][ T6394] ? iter_file_splice_write+0xdf/0x7d0 [ 846.292331][ T6394] __kmalloc+0x95/0x1a0 [ 846.296525][ T6394] iter_file_splice_write+0xdf/0x7d0 [ 846.301834][ T6394] ? atime_needs_update+0x303/0x410 [ 846.307135][ T6394] ? touch_atime+0x12f/0x310 [ 846.311780][ T6394] ? generic_file_splice_read+0x13b/0x290 [ 846.317588][ T6394] ? splice_from_pipe+0xd0/0xd0 [ 846.322470][ T6394] direct_splice_actor+0x84/0xa0 [ 846.327503][ T6394] splice_direct_to_actor+0x2ee/0x5f0 [ 846.332918][ T6394] ? do_splice_direct+0x180/0x180 [ 846.337972][ T6394] do_splice_direct+0x104/0x180 [ 846.342850][ T6394] do_sendfile+0x3b8/0x950 [ 846.347399][ T6394] __x64_sys_sendfile64+0x110/0x150 [ 846.352651][ T6394] do_syscall_64+0x41/0xc0 [ 846.357147][ T6394] ? irqentry_exit+0x12/0x40 [ 846.361776][ T6394] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 846.367799][ T6394] RIP: 0033:0x7f5383fa4169 [ 846.372240][ T6394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 03:40:58 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:40:58 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 846.391892][ T6394] RSP: 002b:00007f5383317168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 846.400332][ T6394] RAX: ffffffffffffffda RBX: 00007f53840c3f80 RCX: 00007f5383fa4169 [ 846.408326][ T6394] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 846.416325][ T6394] RBP: 00007f53833171d0 R08: 0000000000000000 R09: 0000000000000000 [ 846.424316][ T6394] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 846.432364][ T6394] R13: 00007fff2911187f R14: 00007f5383317300 R15: 0000000000022000 [ 846.440385][ T6394] 03:40:59 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) (fail_nth: 6) [ 846.468547][ T6401] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 846.512479][ T6401] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 846.566469][ T6409] FAULT_INJECTION: forcing a failure. [ 846.566469][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 846.579229][ T6409] CPU: 1 PID: 6409 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller #0 [ 846.587913][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 846.597987][ T6409] Call Trace: [ 846.601280][ T6409] [ 846.604227][ T6409] dump_stack_lvl+0xda/0x130 [ 846.608880][ T6409] dump_stack+0x15/0x20 [ 846.613059][ T6409] should_fail_ex+0x21f/0x230 [ 846.617780][ T6409] __should_failslab+0x92/0xa0 [ 846.622600][ T6409] should_failslab+0x9/0x20 [ 846.627170][ T6409] slab_pre_alloc_hook+0x38/0x180 [ 846.632274][ T6409] kmem_cache_alloc_lru+0x54/0x260 [ 846.637429][ T6409] ? __d_alloc+0x3d/0x380 [ 846.641796][ T6409] __d_alloc+0x3d/0x380 [ 846.646024][ T6409] ? security_inode_alloc+0x32/0xd0 [ 846.651294][ T6409] d_alloc_pseudo+0x1e/0x50 [ 846.655893][ T6409] alloc_file_pseudo+0x74/0x160 [ 846.660771][ T6409] ? inode_init_always+0x413/0x440 [ 846.665935][ T6409] sock_alloc_file+0x9c/0x1b0 [ 846.670756][ T6409] do_accept+0x22d/0x3a0 [ 846.675108][ T6409] __sys_accept4+0x9b/0x110 [ 846.679708][ T6409] __x64_sys_accept4+0x53/0x60 [ 846.684502][ T6409] do_syscall_64+0x41/0xc0 [ 846.688965][ T6409] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 846.694943][ T6409] RIP: 0033:0x7faac8acc169 [ 846.699385][ T6409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.719071][ T6409] RSP: 002b:00007faac7e3f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 846.727506][ T6409] RAX: ffffffffffffffda RBX: 00007faac8bebf80 RCX: 00007faac8acc169 [ 846.735502][ T6409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 846.743505][ T6409] RBP: 00007faac7e3f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 846.751501][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.759531][ T6409] R13: 00007ffc18cf34cf R14: 00007faac7e3f300 R15: 0000000000022000 03:40:59 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (fail_nth: 4) 03:40:59 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) 03:40:59 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 846.767570][ T6409] [ 846.783442][ T6401] __nla_validate_parse: 7 callbacks suppressed [ 846.783464][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:40:59 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, 0x0}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) [ 846.872434][ T6418] FAULT_INJECTION: forcing a failure. [ 846.872434][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 846.885329][ T6418] CPU: 0 PID: 6418 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller #0 [ 846.894032][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 846.904171][ T6418] Call Trace: [ 846.907466][ T6418] [ 846.910411][ T6418] dump_stack_lvl+0xda/0x130 [ 846.915034][ T6418] dump_stack+0x15/0x20 [ 846.919218][ T6418] should_fail_ex+0x21f/0x230 [ 846.923936][ T6418] __should_failslab+0x92/0xa0 [ 846.928795][ T6418] should_failslab+0x9/0x20 [ 846.933334][ T6418] slab_pre_alloc_hook+0x38/0x180 [ 846.938492][ T6418] kmem_cache_alloc+0x58/0x260 [ 846.943292][ T6418] ? __alloc_file+0x2e/0x150 [ 846.947915][ T6418] ? inode_doinit_with_dentry+0x7cc/0x830 [ 846.953717][ T6418] __alloc_file+0x2e/0x150 [ 846.958178][ T6418] alloc_empty_file+0xba/0x1a0 [ 846.963070][ T6418] alloc_file+0x3a/0x2f0 [ 846.967418][ T6418] alloc_file_pseudo+0x103/0x160 [ 846.972430][ T6418] sock_alloc_file+0x9c/0x1b0 [ 846.977253][ T6418] do_accept+0x22d/0x3a0 [ 846.981503][ T6418] __sys_accept4+0x9b/0x110 [ 846.986072][ T6418] __x64_sys_accept4+0x53/0x60 [ 846.990837][ T6418] do_syscall_64+0x41/0xc0 [ 846.995267][ T6418] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.001195][ T6418] RIP: 0033:0x7faac8acc169 [ 847.005604][ T6418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.025305][ T6418] RSP: 002b:00007faac7e3f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 847.033740][ T6418] RAX: ffffffffffffffda RBX: 00007faac8bebf80 RCX: 00007faac8acc169 [ 847.041895][ T6418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 847.049941][ T6418] RBP: 00007faac7e3f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 847.057919][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:40:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x1c0e0000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:59 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 847.065955][ T6418] R13: 00007ffc18cf34cf R14: 00007faac7e3f300 R15: 0000000000022000 [ 847.073933][ T6418] [ 847.140029][ T6424] FAULT_INJECTION: forcing a failure. [ 847.140029][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 847.140068][ T6423] loop3: detected capacity change from 0 to 512 [ 847.152691][ T6424] CPU: 1 PID: 6424 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller #0 [ 847.152723][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 847.152773][ T6424] Call Trace: [ 847.152780][ T6424] [ 847.152788][ T6424] dump_stack_lvl+0xda/0x130 [ 847.152844][ T6424] dump_stack+0x15/0x20 [ 847.192773][ T6424] should_fail_ex+0x21f/0x230 [ 847.197501][ T6424] __should_failslab+0x92/0xa0 [ 847.202308][ T6424] should_failslab+0x9/0x20 [ 847.206851][ T6424] slab_pre_alloc_hook+0x38/0x180 [ 847.211973][ T6424] kmem_cache_alloc+0x58/0x260 [ 847.216771][ T6424] ? security_file_alloc+0x32/0xd0 [ 847.221998][ T6424] ? kmem_cache_alloc+0x17b/0x260 [ 847.227160][ T6424] security_file_alloc+0x32/0xd0 [ 847.232198][ T6424] __alloc_file+0x81/0x150 [ 847.236683][ T6424] alloc_empty_file+0xba/0x1a0 [ 847.241478][ T6424] alloc_file+0x3a/0x2f0 [ 847.245843][ T6424] alloc_file_pseudo+0x103/0x160 [ 847.250898][ T6424] sock_alloc_file+0x9c/0x1b0 [ 847.255691][ T6424] do_accept+0x22d/0x3a0 [ 847.260051][ T6424] __sys_accept4+0x9b/0x110 [ 847.264575][ T6424] __x64_sys_accept4+0x53/0x60 [ 847.269391][ T6424] do_syscall_64+0x41/0xc0 [ 847.273844][ T6424] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.279794][ T6424] RIP: 0033:0x7faac8acc169 [ 847.284228][ T6424] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.303937][ T6424] RSP: 002b:00007faac7e3f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 847.312442][ T6424] RAX: ffffffffffffffda RBX: 00007faac8bebf80 RCX: 00007faac8acc169 [ 847.320442][ T6424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 847.328502][ T6424] RBP: 00007faac7e3f1d0 R08: 0000000000000000 R09: 0000000000000000 03:40:59 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 847.336499][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.344548][ T6424] R13: 00007ffc18cf34cf R14: 00007faac7e3f300 R15: 0000000000022000 [ 847.352548][ T6424] [ 847.360155][ T6423] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 847.377773][ T6423] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:40:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x60000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:40:59 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 847.427895][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 847.504099][ T6431] loop3: detected capacity change from 0 to 512 [ 847.536737][ T6431] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 847.540570][ T6432] FAULT_INJECTION: forcing a failure. [ 847.540570][ T6432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.564321][ T6432] CPU: 0 PID: 6432 Comm: syz-executor.1 Not tainted 6.4.0-rc2-syzkaller #0 [ 847.572937][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 847.583010][ T6432] Call Trace: [ 847.585307][ T6431] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 847.587018][ T6432] [ 847.587028][ T6432] dump_stack_lvl+0xda/0x130 [ 847.606843][ T6432] dump_stack+0x15/0x20 [ 847.611021][ T6432] should_fail_ex+0x21f/0x230 [ 847.615907][ T6432] should_fail+0xb/0x10 [ 847.620170][ T6432] should_fail_usercopy+0x1a/0x20 [ 847.625240][ T6432] _copy_to_user+0x1e/0x90 [ 847.629739][ T6432] simple_read_from_buffer+0xa0/0x110 [ 847.633841][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 847.635151][ T6432] proc_fail_nth_read+0xf6/0x140 [ 847.635188][ T6432] ? proc_fault_inject_write+0x200/0x200 [ 847.635215][ T6432] vfs_read+0x19e/0x580 [ 847.659196][ T6432] ? __fget_files+0x1c4/0x200 [ 847.663943][ T6432] ? mutex_lock+0xd/0x30 [ 847.668287][ T6432] ksys_read+0xeb/0x1a0 [ 847.672497][ T6432] __x64_sys_read+0x42/0x50 [ 847.677030][ T6432] do_syscall_64+0x41/0xc0 [ 847.681479][ T6432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.687486][ T6432] RIP: 0033:0x7faac8a7df8c [ 847.691922][ T6432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 847.711601][ T6432] RSP: 002b:00007faac7e3f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 847.720112][ T6432] RAX: ffffffffffffffda RBX: 00007faac8bebf80 RCX: 00007faac8a7df8c [ 847.728137][ T6432] RDX: 000000000000000f RSI: 00007faac7e3f1e0 RDI: 0000000000000004 [ 847.736237][ T6432] RBP: 00007faac7e3f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 847.744226][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:41:00 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:41:00 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, 0x0}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) 03:41:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x65580000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 847.752215][ T6432] R13: 00007ffc18cf34cf R14: 00007faac7e3f300 R15: 0000000000022000 [ 847.760197][ T6432] 03:41:00 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xb56) 03:41:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 03:41:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x2, 0x0) [ 847.864618][ T6441] loop3: detected capacity change from 0 to 512 03:41:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x4, 0x0) 03:41:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x80000, 0x0) [ 847.908299][ T6441] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 847.936914][ T6441] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x80040, 0x0) [ 847.967276][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:00 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x81000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:00 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x1000000, 0x0) [ 848.256405][ T6458] loop3: detected capacity change from 0 to 512 [ 848.277310][ T6458] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 848.291824][ T6458] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 848.315529][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:01 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:41:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x2000000, 0x0) 03:41:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x81ffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:01 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff002) 03:41:01 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, 0x0}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) 03:41:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x4000000, 0x0) [ 848.712445][ T6463] loop3: detected capacity change from 0 to 512 03:41:01 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 03:41:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x40000800, 0x0) [ 848.771996][ T6463] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 848.808512][ T6463] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:01 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 848.868942][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:01 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0xfeffffff, 0x0) 03:41:01 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 03:41:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x88470000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:01 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 03:41:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0xfffffffe, 0x0) [ 849.113256][ T6485] loop3: detected capacity change from 0 to 512 [ 849.172124][ T6485] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 849.203571][ T6485] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 849.222915][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:02 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff003) 03:41:02 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x80000000000, 0x0) 03:41:02 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 03:41:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x88480000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:02 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:41:02 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x1000000000000, 0x0) [ 849.605867][ T6500] loop3: detected capacity change from 0 to 512 [ 849.632584][ T6500] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 849.677123][ T6500] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 849.774218][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 849.819058][ T6488] ================================================================== [ 849.827176][ T6488] BUG: KCSAN: data-race in hrtimer_reprogram / print_cpu [ 849.834250][ T6488] [ 849.836584][ T6488] write to 0xffff888237d1ed60 of 8 bytes by interrupt on cpu 1: [ 849.844233][ T6488] hrtimer_reprogram+0x1bd/0x230 [ 849.849197][ T6488] hrtimer_update_softirq_timer+0x1e0/0x1f0 [ 849.855123][ T6488] hrtimer_run_softirq+0xf8/0x120 [ 849.860186][ T6488] __do_softirq+0xc1/0x265 [ 849.864649][ T6488] run_ksoftirqd+0x17/0x20 [ 849.869098][ T6488] smpboot_thread_fn+0x30a/0x4a0 [ 849.874062][ T6488] kthread+0x1d7/0x210 [ 849.878159][ T6488] ret_from_fork+0x1f/0x30 [ 849.882650][ T6488] [ 849.884990][ T6488] read to 0xffff888237d1ed60 of 8 bytes by task 6488 on cpu 0: [ 849.892547][ T6488] print_cpu+0x2fb/0x640 [ 849.896829][ T6488] timer_list_show+0x115/0x180 [ 849.901634][ T6488] seq_read_iter+0x2bc/0x8f0 [ 849.906272][ T6488] proc_reg_read_iter+0x10e/0x180 [ 849.911366][ T6488] generic_file_splice_read+0xe3/0x290 [ 849.916850][ T6488] splice_direct_to_actor+0x25a/0x5f0 [ 849.922245][ T6488] do_splice_direct+0x104/0x180 [ 849.927117][ T6488] do_sendfile+0x3b8/0x950 [ 849.931568][ T6488] __x64_sys_sendfile64+0x110/0x150 [ 849.936798][ T6488] do_syscall_64+0x41/0xc0 [ 849.941245][ T6488] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 849.947181][ T6488] [ 849.949516][ T6488] value changed: 0x000000c5dce35112 -> 0x000000c5dcdd661a [ 849.956642][ T6488] [ 849.958980][ T6488] Reported by Kernel Concurrency Sanitizer on: 03:41:02 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:02 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 03:41:02 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x100000000000000, 0x0) 03:41:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x88a8ffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 849.965137][ T6488] CPU: 0 PID: 6488 Comm: syz-executor.0 Not tainted 6.4.0-rc2-syzkaller #0 [ 849.973751][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 849.983879][ T6488] ================================================================== 03:41:02 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x200000000000000, 0x0) 03:41:02 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) [ 850.026755][ T6513] loop3: detected capacity change from 0 to 512 [ 850.049953][ T6513] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 850.072546][ T6513] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 850.102306][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:03 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) 03:41:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x400000000000000, 0x0) 03:41:03 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 03:41:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xb8030000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:03 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:41:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x4000080000000000, 0x0) [ 850.550878][ T6526] loop3: detected capacity change from 0 to 512 [ 850.612103][ T6526] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 850.627187][ T6526] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 850.683899][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:03 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:03 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 03:41:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0xfeffffff00000000, 0x0) 03:41:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xe2000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x2) 03:41:03 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) [ 850.950163][ T6539] loop3: detected capacity change from 0 to 512 [ 851.008531][ T6539] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 851.038405][ T6539] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:03 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 03:41:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x4) 03:41:03 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff005) 03:41:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xeaffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:03 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:41:03 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) [ 851.476088][ T6554] loop3: detected capacity change from 0 to 512 [ 851.548157][ T6554] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 851.575250][ T6554] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:04 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:04 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x0, 0x0, 0x91d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 03:41:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80040) 03:41:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xf0ffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x1000000) 03:41:04 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) [ 851.848501][ T6566] loop3: detected capacity change from 0 to 512 [ 851.867979][ T6566] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 851.882668][ T6566] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x2000000) 03:41:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xfb010000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 851.922326][ T6566] __nla_validate_parse: 2 callbacks suppressed [ 851.922350][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x4000000) [ 852.031070][ T6581] loop3: detected capacity change from 0 to 512 [ 852.077844][ T6581] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 852.141298][ T6581] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 852.205243][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:04 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) 03:41:04 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:41:04 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x40000800) 03:41:05 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xfeffffff}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0xfeffffff) 03:41:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0xfffffffe) 03:41:05 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000000000) [ 852.762131][ T6595] loop3: detected capacity change from 0 to 512 03:41:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x1000000000000) [ 852.829217][ T6595] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 852.864446][ T6595] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x100000000000000) 03:41:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xffffa888}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 853.005099][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 853.073551][ T6611] loop3: detected capacity change from 0 to 512 [ 853.127067][ T6611] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value 03:41:05 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff007) 03:41:05 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {}, 0x1, @canfd={{}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:41:05 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x200000000000000) [ 853.200670][ T6611] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 853.331604][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:06 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x400000000000000) 03:41:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xffffff7f}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x4000080000000000) [ 853.624906][ T6621] loop3: detected capacity change from 0 to 512 03:41:06 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0xfeffffff00000000) [ 853.674184][ T6621] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 853.694056][ T6621] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x320, 0x90, 0x5002004a, 0x0, 0x90, 0x0, 0x288, 0x3c8, 0x3c8, 0x288, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1b0, 0x1f8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x2}}, @common=@inet=@recent1={{0x108}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x380) ftruncate(r1, 0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x40000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 03:41:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r1 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x320, 0x90, 0x5002004a, 0x0, 0x90, 0x0, 0x288, 0x3c8, 0x3c8, 0x288, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1b0, 0x1f8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x2}}, @common=@inet=@recent1={{0x108}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x380) (async) ftruncate(r1, 0x6) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x40000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 853.737055][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xffffff81}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 853.857420][ T6642] loop3: detected capacity change from 0 to 512 [ 853.902786][ T6642] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 853.944858][ T6642] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 853.976950][ T6642] EXT4-fs mount: 200 callbacks suppressed [ 853.976966][ T6642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.048626][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.097697][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:41:06 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff008) 03:41:06 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x320, 0x90, 0x5002004a, 0x0, 0x90, 0x0, 0x288, 0x3c8, 0x3c8, 0x288, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1b0, 0x1f8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x2}}, @common=@inet=@recent1={{0x108}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x380) (async) ftruncate(r1, 0x6) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x40000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 03:41:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$eJzs28tvG1UXAPAzdtJ+fX0xpTyaFggURMQjadICXSDxEEgsQEKCRVmGJK1C3QY1QaJVBCmLskSV2COWSPwFrGCDgBUSW9ijShXKpoWV0dgziWPsEOfllvn9pGnvnRnr3OOZa9+5Nw6gsIbSf5KI/RHxa0QMNKqrTxhq/HdraWHyz6WFySRqtbf+SOrn3VxamMxPzV+3L68sNupH2sSdu3T53ES1On0xq4/On39/dO7S5adnzk+cnT47fWH81KmTJ8aee3b8mc2mWIosr5uDH80ePfzaO9femDx97d0fv07y/Fvy2CJDax18bIuD9dqBpnLS18OG0JVyRKSXq7/e/weiHCsXbyBe/aSnjQO2Va1Wq+3ufHixBvyHJbGhl73Q9AEC3JHyL/r0+TffdmDYcdu48VLjASjN+1a2NY70NSYOsmejA9sUfygiTi/+9UW6xfbMQwAArPJtOv55qt34rxT3Np33/2wNpRIRd0XEwYi4OyIORcQ9EfVz74uI+7uM37pI8s/xT+n6hhJbp3T893y2trV6/JeP/qJSzmoH6vn3J2dmqtPHI66kB4ejf3daH1sjxnev/PJZp2PN4790S+PnY8GsHdf7WibopibmJzaR8io3rkQM9rXLP1leCUgi4nBEDG4wxswTXx3tdOzf81/DFqwz1b6MeLxx/RejJf9csvb65Oj/ojp9fDS7K6KyrzXGTz9ffbNT/E3lvwXS67+37f2/nH8laV6vnes+xtXfPu34TLPR+39X8na9vCvb9+HE/PzFsYhdyevZ/hdX9o+vvDav5+en+Q8fa9//D8bKO3EkItKb+IGIeDAiHsra/nBEPBIRx9bI/4eXH31v4/lvrzT/qa6uf/eF8rnvv1kVtNJN/un1P1kvDWd71vP5t94Gbvb9AwAAgDtBKSL2R1IaWS6XSiMjjb/hPxR7S9XZufknz8x+cGGq8RuBSvSX8pmugab50LHssT6vj7fUT2Tzxp+X99TrI5Oz1aleJw8Ft69D/0/9Xu5164Bt5/daUFz6PxSX/g/Fpf9DcbXp/3t60Q5g57X7/v+4B+0Adp7xPxSX/g/Fpf9Dcen/UEib+V2/QpELUbotmlGEQhI9CNrrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICt8XcAAAD//zbE3qM=") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xffffffea}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 854.228129][ T6649] loop3: detected capacity change from 0 to 512 [ 854.251997][ T6649] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 854.268090][ T6649] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 854.281729][ T6649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.315699][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.341976][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:41:07 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x0, 0x2, 0x0, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) 03:41:07 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)={0x7, 0x2, 0x0, {0x0, 0xea60}, {r2, r3/1000+10000}, {}, 0x1, @canfd={{}, 0x26, 0x0, 0x0, 0x0, "e268cae0c66e9b09454bae4e45abc694b4deb91db112d158627fd9e03d33efcf64f031c9b2fc2999fc167d5f5eb25e4575883c9eb73ebfd6dce824d89a37c461"}}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x44) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) clock_gettime(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) 03:41:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) accept$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000100)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000380)="fe63cfdf6da183c81823ab4a8b305f48fda31430f091f3b7a801cb36ea0610432b2504e8a5622ee422992c97d4f8acffd683558bde2c0476471bf623b3c125459c", &(0x7f0000000400)=@udp=r1, 0x4}, 0x20) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) bind$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x7fff}, 0xc) 03:41:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xfffffff0}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) 03:41:07 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000d67) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca00000000000000fe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xdd7d, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000280000042dbd7000fbdb", @ANYRES32=0x0, @ANYBLOB="0b0000000e00f2ffe0ff0700060005000000696e6772657373000600050020ff00"/48], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_settime(0x4, &(0x7f00000005c0)={0x0, 0x989680}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8) clock_gettime(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x7, 0x91d, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0xff, 0x5, 0x10000, 0x1, 0x16d, 0x9, 0x1, 0x223]}, &(0x7f0000000080)=0x100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) rmdir(&(0x7f0000000140)='./file0\x00') 03:41:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) accept$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000100)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000380)="fe63cfdf6da183c81823ab4a8b305f48fda31430f091f3b7a801cb36ea0610432b2504e8a5622ee422992c97d4f8acffd683558bde2c0476471bf623b3c125459c", &(0x7f0000000400)=@udp=r1, 0x4}, 0x20) (async) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) (async) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (async) bind$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x7fff}, 0xc) [ 854.560314][ T6658] loop3: detected capacity change from 0 to 512 03:41:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) accept$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000100)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000380)="fe63cfdf6da183c81823ab4a8b305f48fda31430f091f3b7a801cb36ea0610432b2504e8a5622ee422992c97d4f8acffd683558bde2c0476471bf623b3c125459c", &(0x7f0000000400)=@udp=r1, 0x4}, 0x20) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) bind$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x7fff}, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) close(r2) (async) accept$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000100)=0x10) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000380)="fe63cfdf6da183c81823ab4a8b305f48fda31430f091f3b7a801cb36ea0610432b2504e8a5622ee422992c97d4f8acffd683558bde2c0476471bf623b3c125459c", &(0x7f0000000400)=@udp=r1, 0x4}, 0x20) (async) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) (async) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) (async) bind$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x7fff}, 0xc) (async) [ 854.614726][ T6658] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 854.643259][ T6658] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) 03:41:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="75109c60fa2e6db43c747cd49570be72e3244900171a0c6f5a60a72236b54c1cf0e2f30f78fdeed7cc2b0a788e0417f7877bea8c20"], 0x2, 0x434, &(0x7f0000000d80)="$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") r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5acf399e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={0x0}) r1 = socket(0xa, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000840)=@random={'btrfs.', 'nl80211\x00\x8c\xa2\r\x96\xf5\x9a\xf5R\x83\xb2\x88=\x95\xe9\xc7\xde\n\xb4\xc6\xe5\xa3X\xf2\xba\x93\xda\x88\x06/\x1d\xf8hF\nn\xc3\xfa\x94\xcc\xe03\xab\xa6\x86S\xc9\xe8\xf8Eq\xe0&\xcc\xc3\xe8\x8axN\xff,\x9a\x86\x7fQ\xfa\xc1\x93t\xdc\xefs\xb2\x80)\xe0\xba\xd2\x119=|\xf6\v\x1d\x18\xfd\"\xbf\xea\xcd\x11\xac3\x18\xa9\x86\xd1\x99\x909\xf7\x9f\f\x04\v\xd4\xbc.Z\xe6\x8d\x0e\xe9Py\x1b\f\xa5\xa0\x02\xf2\xf4\x84\x8b\xd2\xf7k\xed&M*\v\xc5\x81C\a\x81\xe1\x89\x96\xf4,\xc7\x1e\xcd\x7fr\xe7\x06:\xfa\x1e]\x10!?\x0f\xaak\"\x81c\a\x13\xb7\x1e\xd4\xca\xce\xa6\x80\x03\x9bR\xcc\x18\x11\x844\xaf\xfb8l\xde\xf72\xa1\x827\xe3\xbc\xa9\x14\xa6I'}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000ac0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01f0ffffd6fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb441601"], 0x20000600}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x143042, 0x0) r7 = socket(0x2a, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xa06, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000)=0xb9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r6, 0x2006fff) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0/file0\x00'}) [ 854.666104][ T6658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.688027][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x2400c041}, 0x4000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 854.723071][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.779767][ T6685] loop3: detected capacity change from 0 to 512 [ 854.789303][ T6685] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2264: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 854.806268][ T6685] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 854.819609][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.852469][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.884201][ T3072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:41:07 executing program 5: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ffff009) 03:41:07 executing pro