{0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x5, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002e00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 719.544818][T30983] loop5: detected capacity change from 0 to 512 [ 719.552198][T30981] loop3: detected capacity change from 0 to 512 [ 719.562815][T30992] loop4: detected capacity change from 0 to 512 [ 719.581006][T30981] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa}, 0x0) 19:04:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f003200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x6, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 719.592560][T30981] EXT4-fs (loop3): get root inode failed [ 719.598205][T30981] EXT4-fs (loop3): mount failed [ 719.604472][T30992] EXT4-fs (loop4): bad geometry: first data block 157 is beyond end of filesystem (64) 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xb}, 0x0) 19:04:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000009e0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 719.649148][T30981] loop3: detected capacity change from 0 to 512 [ 719.658391][T31011] loop5: detected capacity change from 0 to 512 [ 719.674336][T30981] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 719.685836][T30981] EXT4-fs (loop3): get root inode failed [ 719.691471][T30981] EXT4-fs (loop3): mount failed [ 719.741001][T31026] loop4: detected capacity change from 0 to 512 [ 719.748804][T31026] EXT4-fs (loop4): bad geometry: first data block 158 is beyond end of filesystem (64) 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc}, 0x0) 19:04:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f003f00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x8, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00001ca20000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:42 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x9, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r3, 0x29, 0x21, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f0000000080)) openat$cgroup_ro(r2, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000400)=""/101) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000200)=0xe8) copy_file_range(r0, &(0x7f0000000240)=0xc, r4, &(0x7f0000000280)=0x2, 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x47, 0x80142) 19:04:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000e000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xd}, 0x0) [ 719.918439][T31039] loop5: detected capacity change from 0 to 512 [ 719.928475][T31042] loop4: detected capacity change from 0 to 512 [ 719.945796][T31051] loop3: detected capacity change from 0 to 512 [ 719.946982][T31042] EXT4-fs (loop4): bad geometry: first data block 162 is beyond end of filesystem (64) 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xe}, 0x0) 19:04:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 719.991141][T31051] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.002665][T31051] EXT4-fs (loop3): get root inode failed [ 720.008305][T31051] EXT4-fs (loop3): mount failed 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x10}, 0x0) 19:04:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000edc00000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 720.069129][T31051] loop3: detected capacity change from 0 to 512 [ 720.086248][T31051] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.097897][T31051] EXT4-fs (loop3): get root inode failed [ 720.103526][T31051] EXT4-fs (loop3): mount failed 19:04:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000020f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xa, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x11}, 0x0) [ 720.140175][T31081] loop5: detected capacity change from 0 to 512 [ 720.175616][T31090] loop3: detected capacity change from 0 to 512 [ 720.182198][T31091] loop4: detected capacity change from 0 to 512 19:04:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 720.202243][T31091] EXT4-fs (loop4): bad geometry: first data block 192 is beyond end of filesystem (64) [ 720.225179][T31090] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.236702][T31090] EXT4-fs (loop3): get root inode failed [ 720.242366][T31090] EXT4-fs (loop3): mount failed [ 720.267824][T31107] loop5: detected capacity change from 0 to 512 19:04:43 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x1, 0x20, 0x9, 0x2, "c8d46611aa15c9a84818992262c9da31876732e98af45caf0f968f29181c77fe"}) creat(&(0x7f00000000c0)='./bus\x00', 0x42) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xb, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000030f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x12}, 0x0) 19:04:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003c50000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x25}, 0x0) [ 720.395133][T31128] loop3: detected capacity change from 0 to 512 [ 720.402210][T31132] loop4: detected capacity change from 0 to 512 [ 720.404391][T31131] loop5: detected capacity change from 0 to 512 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xc, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x28}, 0x0) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xd, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x48}, 0x0) 19:04:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 720.437596][T31128] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.449135][T31128] EXT4-fs (loop3): get root inode failed [ 720.454844][T31128] EXT4-fs (loop3): mount failed [ 720.467059][T31132] EXT4-fs (loop4): bad geometry: first data block 197 is beyond end of filesystem (64) [ 720.540099][T31128] loop3: detected capacity change from 0 to 512 [ 720.570360][T31128] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.581955][T31128] EXT4-fs (loop3): get root inode failed [ 720.587648][T31128] EXT4-fs (loop3): mount failed [ 720.596100][T31167] loop5: detected capacity change from 0 to 512 19:04:43 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = socket$inet_icmp(0x2, 0x2, 0x1) preadv(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000040)=""/42, 0x2a}], 0x4, 0x9, 0x0) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4c}, 0x0) 19:04:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003c60000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xe, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000040f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x60}, 0x0) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xf, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 720.720859][T31191] loop5: detected capacity change from 0 to 512 [ 720.727551][T31194] loop3: detected capacity change from 0 to 512 [ 720.735925][T31192] loop4: detected capacity change from 0 to 512 [ 720.758098][T31192] EXT4-fs (loop4): bad geometry: first data block 198 is beyond end of filesystem (64) 19:04:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 720.785862][T31194] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.797468][T31194] EXT4-fs (loop3): get root inode failed [ 720.803089][T31194] EXT4-fs (loop3): mount failed 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x68}, 0x0) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x10, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003c70000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 720.839423][T31194] loop3: detected capacity change from 0 to 512 [ 720.882323][T31194] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 720.893838][T31194] EXT4-fs (loop3): get root inode failed [ 720.899503][T31194] EXT4-fs (loop3): mount failed [ 720.913224][T31228] loop4: detected capacity change from 0 to 512 [ 720.936864][T31233] loop5: detected capacity change from 0 to 512 [ 720.943611][T31228] EXT4-fs (loop4): bad geometry: first data block 199 is beyond end of filesystem (64) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x11, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6c}, 0x0) 19:04:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f007400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000050f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003c80000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 0: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbee0, 0x8031, 0xffffffffffffffff, 0x5d960000) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/179, 0xb3}, {&(0x7f0000001340)=""/23, 0x17}, {&(0x7f0000001380)=""/134, 0x86}, {&(0x7f0000001440)=""/219, 0xdb}, {&(0x7f0000001540)=""/30, 0x1e}], 0x9, 0x7fffffff, 0x9) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000001640)) [ 721.081049][T31258] loop4: detected capacity change from 0 to 512 [ 721.094734][T31262] loop3: detected capacity change from 0 to 512 [ 721.101958][T31258] EXT4-fs (loop4): bad geometry: first data block 200 is beyond end of filesystem (64) [ 721.102045][T31259] loop5: detected capacity change from 0 to 512 [ 721.117818][T31262] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x74}, 0x0) 19:04:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003c90000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1c, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:43 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) fdatasync(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) ftruncate(r0, 0x59) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 721.129331][T31262] EXT4-fs (loop3): get root inode failed [ 721.135003][T31262] EXT4-fs (loop3): mount failed 19:04:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f007a00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7a}, 0x0) 19:04:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x300}, 0x0) [ 721.188267][T31262] loop3: detected capacity change from 0 to 512 [ 721.214459][T31262] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 721.226072][T31262] EXT4-fs (loop3): get root inode failed [ 721.231719][T31262] EXT4-fs (loop3): mount failed [ 721.247627][T31284] loop4: detected capacity change from 0 to 512 [ 721.277435][T31294] loop5: detected capacity change from 0 to 512 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x31, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x500}, 0x0) [ 721.298817][T31284] EXT4-fs (loop4): bad geometry: first data block 201 is beyond end of filesystem (64) 19:04:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000060f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00ce00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3d, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x600}, 0x0) 19:04:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffffda0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x700}, 0x0) [ 721.406563][T31320] loop5: detected capacity change from 0 to 512 [ 721.452012][T31332] loop4: detected capacity change from 0 to 512 [ 721.459704][T31334] loop3: detected capacity change from 0 to 512 [ 721.468623][T31332] EXT4-fs (loop4): bad geometry: first data block 218 is beyond end of filesystem (64) [ 721.499573][T31334] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 721.511130][T31334] EXT4-fs (loop3): get root inode failed [ 721.516805][T31334] EXT4-fs (loop3): mount failed 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x22, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f03ce00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x900}, 0x0) 19:04:44 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xfd, 0xb5, 0x20, 0xff, 0x0, 0xe1d, 0x1080, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f0d, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x48000, 0x2d, 0xa5, 0x4, 0x7, 0xfffffe01, 0xffff, 0x0, 0x40}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) sendfile(r0, r0, &(0x7f0000000040)=0x1, 0x418) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) write$evdev(r0, &(0x7f00000002c0)=[{{0x77359400}, 0x5, 0x6, 0x7}, {{0x0, 0x2710}, 0x17, 0x1, 0x3}, {{r2, r3/1000+60000}, 0x11, 0x5}, {{r4, r5/1000+10000}, 0x16, 0xffd9, 0x9}, {{0x77359400}, 0x3, 0x6, 0x401}, {{r6, r7/1000+10000}, 0x15, 0x40, 0x6}, {{}, 0x1f, 0x5, 0x1f}], 0xa8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffffe20000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 721.584812][T31334] loop3: detected capacity change from 0 to 512 [ 721.596644][T31334] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 721.608188][T31334] EXT4-fs (loop3): get root inode failed [ 721.613847][T31334] EXT4-fs (loop3): mount failed [ 721.623378][T31353] loop5: detected capacity change from 0 to 512 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa00}, 0x0) 19:04:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000070f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00cf00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x25, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 721.656157][T31363] loop4: detected capacity change from 0 to 512 [ 721.674689][T31363] EXT4-fs (loop4): bad geometry: first data block 226 is beyond end of filesystem (64) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa16}, 0x0) [ 721.726101][T31378] loop3: detected capacity change from 0 to 512 19:04:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003e80000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0xa00}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xb00}, 0x0) [ 721.766457][T31378] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 721.778069][T31378] EXT4-fs (loop3): get root inode failed [ 721.783692][T31378] EXT4-fs (loop3): mount failed [ 721.802550][T31389] loop5: detected capacity change from 0 to 512 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc00}, 0x0) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1002}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 721.837676][T31400] loop4: detected capacity change from 0 to 512 [ 721.858643][T31378] loop3: detected capacity change from 0 to 512 [ 721.876385][T31400] EXT4-fs (loop4): bad geometry: first data block 232 is beyond end of filesystem (64) [ 721.895925][T31378] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 721.907493][T31378] EXT4-fs (loop3): get root inode failed [ 721.913110][T31378] EXT4-fs (loop3): mount failed 19:04:44 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001300)={'\x00', 0x0, 0x4, 0x2, 0x1c7, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000001c0)={0x1, 0x5, @status={[0x800, 0x0, 0x1, 0x1, 0xffffffffffff8001, 0x57c]}, [0x20, 0x1, 0x800000, 0x3f, 0x7, 0x5, 0x6, 0x6ed, 0x33, 0xa06, 0x9, 0x4, 0x6, 0x7, 0x0, 0x6, 0x1000, 0x3, 0x6, 0xd, 0x5, 0xfffffffffffffff7, 0x0, 0xfffffffffffffffb, 0x259, 0xe2b, 0x7, 0xb0c8, 0x1, 0x683e, 0x2, 0x0, 0x0, 0x7, 0x80000000, 0x7, 0x0, 0x100, 0x1, 0x2, 0xb8b1, 0x9, 0x8, 0x3f, 0x5, 0x315b, 0x1ff, 0x9, 0x81, 0x0, 0x8, 0x81, 0x9, 0x9, 0xfff, 0x0, 0x0, 0x6, 0x7ff, 0x101, 0x4, 0x81, 0x20, 0x55a0]}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00d000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1003}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xd00}, 0x0) 19:04:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffff00000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000080f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1004}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 722.052857][T31433] loop5: detected capacity change from 0 to 512 [ 722.069913][T31437] loop4: detected capacity change from 0 to 512 [ 722.076557][T31442] loop3: detected capacity change from 0 to 512 [ 722.091862][T31437] EXT4-fs (loop4): bad geometry: first data block 240 is beyond end of filesystem (64) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xe00}, 0x0) 19:04:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00d100000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1005}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffff50000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xec0}, 0x0) [ 722.166052][T31442] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 722.177648][T31442] EXT4-fs (loop3): get root inode failed [ 722.183273][T31442] EXT4-fs (loop3): mount failed [ 722.198266][T31434] blktrace: Concurrent blktraces are not allowed on sg0 [ 722.238534][T31442] loop3: detected capacity change from 0 to 512 [ 722.242991][T31472] loop4: detected capacity change from 0 to 512 [ 722.260362][T31474] loop5: detected capacity change from 0 to 512 [ 722.261015][T31442] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 722.278111][T31442] EXT4-fs (loop3): get root inode failed [ 722.283833][T31442] EXT4-fs (loop3): mount failed [ 722.293220][T31472] EXT4-fs (loop4): bad geometry: first data block 245 is beyond end of filesystem (64) 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x1100}, 0x0) 19:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1006}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00d200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000090f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffff60000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000680)={r4, 0x9a, 0x0, 0x3}) r6 = dup3(r5, r5, 0x80000) mq_notify(r6, &(0x7f00000004c0)={0x0, 0x40bc, 0x0, @thr={&(0x7f00000006c0)="4558a68921309523e05e2f7f3250d11fa869e90df56e9d46245e75353496904d78cb97ebd1f63dbde7ef2eaa928af3bc4b6b942fbdfb0ff6b36a67d126df8b12a6d4fbb2e82fa66abcbbbe03d4bb8ce45cb28a3f3e13e3a6fbce639a559a80b8a52725d3323cd83a8df1bda53521a3f3f728b70d94e1684a10d33a32e7b2d41b74bd78d87508d8c85ea4465382de096d2e488a184bd2e892fadc98d183", &(0x7f0000000e80)="ebba6fbba398afff55a200eb60180d150ea0709b5628a478a337ad775dad226953b86b6589ec53209808ba9e872d77a0a67c2d739e98b1ad135ac2258c22c361a48f938ea30559effcd5190e83d01ced7e0a39a8770a7f28b8780f27b960de4f479cde61216a355fc4f107a5a083753cf0cdab83c3"}}) write$sndseq(r6, &(0x7f0000000300)=[{0x1d, 0x80, 0x7, 0x6, @time={0x80, 0x80a6}, {0xe7, 0x6}, {0xc0, 0x9}, @time}, {0x7d, 0x7, 0x8, 0x40, @tick, {0xb0, 0x1}, {0x1, 0x6}, @raw8={"4185e93cdb00a8d8b810b570"}}, {0x2, 0x20, 0x0, 0x0, @tick=0x7, {0x2, 0x4}, {0x8, 0x6}, @queue={0x3f, {0x0, 0xb8}}}, {0x3, 0x0, 0x0, 0x4e, @time={0x5, 0x8}, {0x2, 0x77}, {0x2, 0x8}, @note={0x9, 0x3, 0x9, 0x60, 0x6}}, {0x4, 0x6, 0x20, 0xff, @time={0x400, 0x5}, {0x7f, 0xf7}, {0x6}, @connect={{0xa9, 0x7f}, {0x3, 0xf7}}}, {0x9, 0x84, 0x20, 0x8, @tick=0x800, {0x3f, 0x1}, {0x1, 0x7}, @queue={0x0, {0x6, 0x3}}}, {0x8, 0x5, 0x4, 0x3f, @time={0x7, 0x9}, {0x1, 0xa9}, {0xc0, 0xb1}, @addr={0x9, 0xa8}}, {0x9, 0x4, 0x6, 0x3, @tick=0x9, {0x7, 0x80}, {0x81, 0x31}, @quote={{0xfd, 0x24}, 0x8, &(0x7f00000002c0)={0x40, 0xf9, 0x20, 0x40, @tick, {0x7f, 0x4}, {0x20, 0x20}, @ext={0xee, &(0x7f00000001c0)="a04fc8de230b158d1fcca1f9a6f2a77111c87002240d71888c2395259caf5e4263df42a0c1ea61bf142393adec0f59cc7cc3e042da1f7f04d682df873f0fb593dfac605e88ee2daccd5ee45f1f25f7d6290f44585407c6026a1a6b7a3a06f50a4b4317e3c925b4073e9d06ffbff05cbb0943c94ea3e31a3081fb896077c1d93b333162a19f6d86f2042ec3f7d09e513eeb1148059184ed2111acea47a5bdf6b838571947c04ebe0d6cc52cf1083b4e4cf39e249fea6d8ce00cd2820e5382afe89d98c88cc4ba451d03709bd367e9ada96f03492fbfafe0c2535da9f18f06249d34a6be4d136ad84f2d2ea30eb6df"}}}}, {0x5, 0x2, 0x58, 0xff, @time={0xdb, 0x7}, {0x6, 0x7}, {0x5, 0xff}, @addr={0xff, 0x8}}], 0xfc) write$evdev(r1, &(0x7f0000000100)=[{{}, 0x4, 0x5, 0x1ff}, {{}, 0x0, 0x401, 0x1}, {{r2, r3/1000+10000}, 0x14, 0x300, 0xc92}, {{}, 0x17, 0xffff}], 0x60) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x0, 0x4, 0x2}) 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x1200}, 0x0) [ 722.466731][T31501] loop5: detected capacity change from 0 to 512 [ 722.482867][T31504] loop4: detected capacity change from 0 to 512 [ 722.485419][T31506] loop3: detected capacity change from 0 to 512 19:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1007}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 722.508793][T31504] EXT4-fs (loop4): bad geometry: first data block 246 is beyond end of filesystem (64) 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x160a}, 0x0) [ 722.570476][T31506] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 722.582058][T31506] EXT4-fs (loop3): get root inode failed [ 722.587769][T31506] EXT4-fs (loop3): mount failed 19:04:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f18d300000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000001f80000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1008}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2000}, 0x0) [ 722.709089][T31506] loop3: detected capacity change from 0 to 512 [ 722.725179][T31539] loop4: detected capacity change from 0 to 512 [ 722.739773][T31543] loop5: detected capacity change from 0 to 512 [ 722.745031][T31506] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1009}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2500}, 0x0) [ 722.757583][T31506] EXT4-fs (loop3): get root inode failed [ 722.763217][T31506] EXT4-fs (loop3): mount failed [ 722.783502][T31539] EXT4-fs (loop4): bad geometry: first data block 248 is beyond end of filesystem (64) 19:04:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000a0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fc0ed00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 722.878254][T31565] loop3: detected capacity change from 0 to 512 [ 722.932406][T31572] loop5: detected capacity change from 0 to 512 [ 722.944333][T31565] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 722.955892][T31565] EXT4-fs (loop3): get root inode failed [ 722.961542][T31565] EXT4-fs (loop3): mount failed [ 723.048515][T31565] loop3: detected capacity change from 0 to 512 [ 723.067340][T31565] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 723.078852][T31565] EXT4-fs (loop3): get root inode failed [ 723.084521][T31565] EXT4-fs (loop3): mount failed 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2800}, 0x0) 19:04:45 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, 0xffff7fff, 0x7) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) execve(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140), &(0x7f0000000300)=[&(0x7f00000002c0)='\x00']) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x0, 0x14, 0x401, 0xff, "26ac1a94874b3d46c8e158cacce01e68c1c453bc1d0d0a8364cfc7e27f5ac72d"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffdf90000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x100b}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000b0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x5, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 723.165265][T31595] loop5: detected capacity change from 0 to 512 [ 723.173543][T31602] loop4: detected capacity change from 0 to 512 [ 723.194604][T31605] loop3: detected capacity change from 0 to 512 19:04:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4800}, 0x0) 19:04:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f500000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 723.211654][T31602] EXT4-fs (loop4): bad geometry: first data block 249 is beyond end of filesystem (64) [ 723.245863][T31605] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 723.257467][T31605] EXT4-fs (loop3): get root inode failed 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x8, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 723.263085][T31605] EXT4-fs (loop3): mount failed 19:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffffb0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4c00}, 0x0) [ 723.318044][T31628] loop5: detected capacity change from 0 to 512 [ 723.353948][T31633] loop4: detected capacity change from 0 to 512 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x9, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 723.362762][T31633] EXT4-fs (loop4): bad geometry: first data block 251 is beyond end of filesystem (64) [ 723.439757][T31605] loop3: detected capacity change from 0 to 512 [ 723.451678][T31605] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 723.463199][T31605] EXT4-fs (loop3): get root inode failed [ 723.468937][T31605] EXT4-fs (loop3): mount failed 19:04:46 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x4, 0xffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6000}, 0x0) 19:04:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f600000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0xa, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003fd0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000c0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0xb, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 723.575502][T31673] loop4: detected capacity change from 0 to 512 [ 723.581703][T31674] loop3: detected capacity change from 0 to 512 [ 723.584142][T31675] loop5: detected capacity change from 0 to 512 [ 723.601357][T31673] EXT4-fs (loop4): bad geometry: first data block 253 is beyond end of filesystem (64) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6800}, 0x0) 19:04:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f700000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffdfd0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 723.644835][T31674] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 723.656436][T31674] EXT4-fs (loop3): get root inode failed [ 723.662143][T31674] EXT4-fs (loop3): mount failed 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0xf, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6c00}, 0x0) [ 723.738533][T31674] loop3: detected capacity change from 0 to 512 [ 723.741125][T31705] loop4: detected capacity change from 0 to 512 [ 723.753273][T31710] loop5: detected capacity change from 0 to 512 [ 723.762332][T31674] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 723.765074][T31705] EXT4-fs (loop4): bad geometry: first data block 253 is beyond end of filesystem (64) [ 723.773876][T31674] EXT4-fs (loop3): get root inode failed [ 723.789137][T31674] EXT4-fs (loop3): mount failed 19:04:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x10, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7400}, 0x0) 19:04:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000d0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003fe0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg(r0, &(0x7f000000a640)=[{{&(0x7f00000000c0)=@xdp={0x2c, 0x2, r1, 0x1e}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="f5a46413671daee6e46e0369fa40a84832eccd44354b57010c2b5f031c1293aac12486fdf86a114e6ff14893b1059753af7be5a51c5ea151be292ae1c6a655aca1263f7175bd3156758da60dd775847587b3412d90240658c1eb91bca1281637c72f9a5fb3b91d05b582d5493b30e278d7c7da16ebf3ab462df0a92821ff81c666c9f0a9bc2ba118905cb2f9cec7001c4eedbf573383d1239a0f2a0bd24101e49430fceaad0a95f2af72a81419a2b875bbb9ce3770951e06b0df0ccdc5ab49899c0cea3179979790e2213dd577c369f1d0", 0xd1}, {&(0x7f0000000140)="62ff2cc3bb6c00dc2097d21cda30", 0xe}, {&(0x7f00000012c0)="1704e80da11a879278a2756de96eadbc36253fdc9434f7ff2abd26ba89382e4d95b5ddd00177beff027a8d439288943d8f57c4b3674ffecb741f588f5b5c838feae97ea56eec1618be7cf45ab0b1622013287adc0cffd34486a303b06e29542dc7977a33f0c07d3aabfb96ade93f166a4538203d921cf822ce8b879964a9197fc04eb77bd454d3578336b05ed017ac915158a9207d4c514f1bed557847eb429f4fc53c6417f8e0988cc22960a5dabb7a24df237e75460ec35c3d159a06823db9da46c10836e28d9cd6dff6c75464bddd88e02b395bdd20df5873", 0xda}, {&(0x7f00000013c0)="a80601e94453368a5408450898b19a9db157f3eb788524d24cedf2e1d7c7a170732c85c8e3474bbab7a2ed50d222c11250a60e0f221c48a0fac02c9abf8f8bac65f116f45822d75377737952320a4b3fba2f6b79c0a6b4e58c7c5d1a68319d18540c4bfd16fce373308792e0c4e90e2452d4b44064b0e2363c908948c6", 0x7d}, {&(0x7f0000001440)="32e25a6bd16a48b4f8592f7e093ca2e6c227db40a83e2d", 0x17}], 0x6, &(0x7f0000001500)=[{0x30, 0x10f, 0x3, "2b1d8f40fc1739ca16bd7466a8df65d6c25ae3dad870e5ea2e"}, {0xb0, 0x119, 0x3, "6810fd57e76e9dd15ded07a040a184658ef8be87ed38634fa0174f78ab7b54b025831e8348d2c4c9db341362c03207ad9af283b6b30da72661b31777fa8e95ae0ea41950c2d14ba9aa9393faac2f7143e0b37507c7ceff7a8b466d83940408e1d6cb1ab4f2fe25b460c8a7b057ec7e5776c68ae4ee346653befcfeb1a401d28ef1b51363e5107b485ae4d68634fb0901e3203d1fc3dbcf173671"}, {0x20, 0xff, 0x2e, "394aa527b70c78c1d268e350"}, {0x40, 0x1, 0x7fffffff, "7151fcbece082cbe34c741c5ee1980aaadff7dabf883eca4c3c6db150fbd911e7940a42206a97380c0"}, {0xf0, 0x10a, 0x9, "3fc88b5923a619d1ea38c94f5467c9d0f1f02f62df89a88548ed243f1d7dd49a3c5584faeb1e0bfab21acf38bbd474260b336a8283e64c8fb78294b0cbb8e6cc1ea6ec0ecf6c2873f5b3d4b077addc016d4a07ec636c773e0e4569cfa4af12fa60f3343e17499294ed32e3bfe894893bc04b01c9f02ea55546c19262b8837e28e48f77f208992c379d8181f618f4b539046260c3e4fcbbb77cda8791d03b2d6c11946cd6c7e0f9f060e5bfcb88329456eb6645b874766cc88e651f3e882e7514dfade4188fada9bdd1ac80f0bf0d8d1f863da2f287beb26a69d03b0ed571"}, {0xf0, 0x109, 0x19, "e372a2810177f0254ab6f6f003800a80887d37d25fcd21802012a41dd9d7d0f2384d88c153b566d1a8504232cb6ba59e792eff369e05607b39f63fb1a0db68a259f5aa6631cdf46bd38e378d05cd228d5b7877e9397bcd0426e773bef94a36eb9bc0cd5bf9e3e3587103cc43d2d1525a89960b5a88b572523436e53851444e25e80a973f1823f7b8dba3dbe8a7809c8e7384444e2282fa48393a2d40cfbca4bf6c0db668a9014668d74ab6d174604a0041b4fec58ea7bdba156e6b0b5e6ecef3d415267e4ad28661573e21708b8c845a92ef3dcb1247cbf32e13b7"}, {0x40, 0x115, 0xffff, "94a0e33e430d716582046c6f168453a96a2bd758da7daf681a743de16362c7601fd07a4303a3c503b910df7ca46522"}, {0xa8, 0x10a, 0x8000, "20ffc51ad061482d4beec3008fdc6bfa20f0a5a3068535a5ef5cf48c979157a29f50335dd468a7f72a07f266ca822304a3a9e3dcc578577851fd681bdddf1e79f1b88d5c817777a6a8f681a0846d77799f523938ab6fb194a9e515bd091ca9defed42a79a5a1b413bf8dbe9932736406876cd954787cb3c6c2e7e3599b6cc62f59b8742eb565cabd2179d0863f386f38c6"}], 0x408}}, {{&(0x7f0000001940)=@phonet={0x23, 0x3, 0xb9, 0x6}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="e2496cb338c378c43978aac5ba9f6e87b40578bf671a7b84c607d393cdbc1f425c444874c973b2a7c491ead0a786a87c6a7aabf3e7781c60245088b60a2e10d31391f989efab44780fd0735cccf6975a3cf404abc384981110fa5189f9c75c9bf2d6b5d9d20f0bc09514a4c7b57ad7daf5ac94ad0fcd2a07ad102ce1a877bd64a2c75e5cd2a02c13b19cef483e3063410b342541aef4c586a421d3010f2e4e68557d729b655d564c5085aedda28a1bc482ce5192bdbbff3af3079f0954bff4c67550ba5b824aa9159dda8bf4de97f4c56069263c8b680e6cb839", 0xda}], 0x1, &(0x7f0000001b00)=[{0x50, 0x112, 0x2, "1892334232db4d3e7b1ac40772daf93d93bf801920193644ea89b197c59cb5bb14e990394e26fb8cb12b2798919c425bb7dc5c7062a15e7b572f34a207"}, {0x18, 0x119, 0x9, "e9601119e807e1"}, {0x108, 0x103, 0x200, "cac5ab359b77e2efcc0d42cb78991c318260ed5d05d2c2c2e156d4b30b1708e6c9785f3eb3c1642458c644b70d7f4c9da50cc6d3f65675c5d643386798b81be8671217b17b3c418c00ba970d80d097e1512f78d11082907578fc0f18b87466e4d137de528d706aebc6d5e3ea35b45c8fc930431ff77d56116a551025cfd50a87825d2efdb7dbf0e0970d253ffaaf51bb02e74cb225e9f948faaff39cd6c2fbb8c633a85f900bb84f94fe4617c35ce7bce292e40670d5f5a6efb5baa982f534fdba4974ea53998fcdf82c88d1ade0290046bab36f7bb38f3f6335db033aba1a6fc5590bf5a2c9c79131d4ec156720633a88"}, {0x10, 0x100, 0x5}], 0x180}}, {{&(0x7f0000001c80)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001d00)="ca4ea81dbe5bdee45ceefd", 0xb}, {&(0x7f0000001d40)="bed2e944537c659e3698b0d6ca0b3b6da711742292cc0d5e89e07ab937886cf7eb9400d74fdb90e51ad539859d1a06afa7eabe10142295945bfa8fcedc609114b6c5c51d53e429dbdb1f2416889160e9d5c905b013b15ae97cfb62ea9e81653c4fcfab46d0a63344a302522ab7126ab6320b8bfda9cbb71c306dfb28bf88010c78b69cfc5e5118195fbaedde389b963842ed24ff17cd30dd08e19d2516afd923960e75652cb1642e7ef8415cbd267a55cc5745c54678034e4d062fea8e8c976d018148c673557abaa23dfe1890516aca571472f8001b839501e573040e81015ff01ff700bbe7183f6fc6f2", 0xeb}, {&(0x7f0000001e40)="4b8107d9b424064328370a321ab5ae5c476a3887410e3931ce56207b9a1803e6e2e33ae5cd76f57ea3fd2fd2db0b8ea667abd0486fef79c101b066bbccd983ded06e13b99cea3860f479edfbac63a1ede1df024fdcfc8a05ed5b40909507b1cc2c9f57823e5f3a856689c93924f7d94b73b7be88d41db8f97ad348baae244fc3d92c8007dc2b926d4c400b77f8a99f7ce9aeee99a343189232c933e2e9386a4b89bca385366d9440a3479230cb706eae1493485aa69865fc9f67bb5b6f0d8f0276af0780432ac2bb7b95729eefbfb3cf91d065f2261ad0cd", 0xd8}, {&(0x7f0000001f40)="4bbd0ada6e23a592417bf7172f5762075463e812d84b19bdf3eb35f4b8e2b73e60757fbd5e1600a608e353e777caab247637c80020c8003cb15caa5903fe71acf486b3457b5574f30a3421383978890990f64ea8424918be3e2088906444fc092574a4d31fd83c98e6b09052b34ad1be331e12f1c2b3ced6fa43c54e69", 0x7d}, {&(0x7f0000001fc0)="64154a2af1054feacd9e84194961cc3f9c7f93595bb8eb7141c791db9f249c22790fee0314b91ac832ab67eac65803b3c374e6adbbbac5c081df2c062353661644fd96c4a62c9199ada9b866ae268dc4c3b1c698fc60408168a38a51bd1c7e66b7465402cf98e95d4e0bb949c0e51c631e460e8ff43ec67eb3c714d0f5001e98c5c8a6d11e85c3dcf1f0d0e687e92bce78747d93dc7a9c5c2f3d", 0x9a}, {&(0x7f0000002080)="49b61df5339c83a9108d06e2f202032495ea98db868b2f9682ad0e1c6d0f054ca649a466d3f5ef7b7594578177a222", 0x2f}, {&(0x7f00000020c0)="77dcde1540dce956f53bd0a877b2f41ac708a8869f120ca12c313620a314fa45e17c2a8326d47fc95b8fe66c786bf3ba97b13e98ea3d43bba88b1e490876a0037fb519c4a7715c3dd72bdb", 0x4b}, {&(0x7f0000002140)="9f8247dab5827a3b3ef2d03fb7bc107e9d536ffd859d956bbf896338222429eb76bebf7f9cf7c47e2ace7e5c6c178dfb9c4061c2a89e83a5862fe075aa33be5309661e5aca6292c59bb7c3bfc8dd10b847e5b78baf209f75865672326bc4b3c4932ed7124395d16820bfcd5bde5a821d350b96916e6823bbcc745c7f34086218511c0eb7b0dec91d981d21939cd21aeb76dce7e865a24a983c58e8ad7a58fea28c514508e9158da5458a2e52462fcb80e219e7932586c5804cdb877e9c476f1ebdcf9735e6b98364817b987132e7d8ce15fc6f2af0bb5fea2bca9417662bd985cb38a656fbe7e1", 0xe7}, {&(0x7f0000002240)="d13fe3cee442171730cf7a3fb9b23d806c0436774d06e74df806695f3ffce64f470c4d1311", 0x25}, {&(0x7f0000002280)="123e285dc4c353fd30f0c74821547ba679e3a258bd6da7577013c875d774bc35f2dd918eb9774d00c8c221bb80864837a5770dd29088f570fc7ef9c37c1f1f49039ded23bd4ab00df88a50a37d34556a5fc779b23458904f881d9a568a0cc846f14bf8f0518c2de141ac88e57dd5834b509327320f504c652206389ab788a615dfbf7e49da295d1a86c51dee8f366add942d3c6771e3819aa6f466c418e3beef708c16780acc6bc43d", 0xa9}], 0xa, &(0x7f0000002400)=[{0x38, 0x101, 0x81, "cc774e82cf59498b480bb27a96fe00ddabd54b7b16218532f2a3c674646f7832ac871a6a4f6e7064"}, {0x18, 0xfc, 0x10001, "e4"}, {0x40, 0x110, 0x80, "52dc8a17b4c4c6054938b1bbc4c770d165802e67106b5c1c9a5c23a366c92d3c3603e7568040e0ca2e"}, {0x108, 0x5830cfe703d3f4f2, 0x1, "8ce70c2a312189c8edbf3bb444ecc5cc9cd856afab1ca16723b920675ffc3d804db04761211a88c468e4650f1df4e2f387aa41c34101ca88c68e42bd6e7b5aac3daec415e01916e40ef831aad7967f2ddbcc3af6eec1efc470aa21100e76e020d94ea32ea6d61b2169434ddbddf839f4cc12b81a89ac129502b321e7e12b8c39201b4fe8345ad7350b4c195db271bfa0a8017fb09b21755743f8e97b972f1c227047a865678dfe6c1a5745110da1c861df27df180cdcc0b66cfe4270d0c4ee1835876e1a69fda3744fa38a8aea070bce139e2c1777916ee99410909f0ebda4ea4dbdff8d93db02b862a27623b29c9bfa989592e9f0"}, {0x30, 0x8c, 0xffffffff, "6e82cf561e7bb02a3b0dd8e9ec67de1cc5b3a54c16e42bb2f9"}, {0x18, 0x1d, 0xb3, "4f1f1938fe37bc"}, {0x70, 0x112, 0x3, "69449b2950bb5c1bcbc132cc067cabd590b7150e0af3625dcddf5bbf83d9ab2af22062fb417ae9e3f582346d47c1116769422651f304e0faa372740e0ccde6a800cdbeb7a628c9327e29aeffd7e2a6e09c373941375516c142c4a4f549a3e7"}, {0xd0, 0x10f, 0x0, "b7f48e3c6f5546ecf8fccbcb304283774c3c3c882c0e9b9e94e609778225899a2fd52e30d8456221fb70c01db6f4478a279e0e9a50c0993915af180df45b2917db932ace4881b2ffe258608b696d964a08adf0e4a34691b340ef0fb46063e9cb2c60769e7f84a21b33f883789859eb0059a40307c6258daeb26d2754766f6a1387b5903328d6828054844ff9e4a40ed36a5eb3c733a9879000e367531eeedcd4e7f968b1080b7a8a9b6525f23d7a98cf0faef899a25402853bd3b7762eac82"}, {0xc0, 0x10d, 0xde83, "5f4ef212761760ce6c522aaa44f1dab99223b812edcfba4a7caabee1e6d59cb521fbdc55bf2e2cb2aee1d68af82906a7ff38d2513a851622f28bbcdc0eb7f3d4d5e8329caf2d8208820d6075a50f60cee3636a5877c976a9485e84d3eebe3f82ce3fe74da094ced8d9c512bc1de61860afdec32256ba300b9768fea0a3ad84284ca13b247c5c8bad6f61cb0cbe1917f768af061acc9c09192ab5ac1c3e93840303ee73b5336b44b21d"}], 0x3e0}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002800)="0da8ea8a0e1649ee5484241a418e6fe0b719e58dc523518accbe686c707bd990ad032f57d96cc0bb0afecfeb13f9c6c6777f5e0d03f07708accb6bd3bbb4d4a8c2949813803ae906728c41696358986b1b7ac366efdfd607b1e6825b41b1fbec68b39c706fd7c26a671e8c6c63", 0x6d}, {&(0x7f0000002880)="4011af1fedce6af229aae5ef5a0b3790f8d0ecbd0f22c6aad8873f98ec99031c6804cd182d10be5fc14de4ab1fd74f32dcb7ca6a660af6ef946feb5087c7981341c987d6df6784965c52492b438a95e708b44c69954c777675b975fc4cfd543b2f22f1a368179f5d1899cda09b720e3f1e7e0b582fb3b8cce0f45b5ac8d78a49597adffb435755c818b5c9499326b515aa8c9e1d48e364438a143eac2954e21d62543311281db199afeebd3ac959", 0xae}, {&(0x7f0000002940)="e130c121f0f1990c7fbd4bc5d10743fd434d3704ca5163029bb110da23ae262a604a8a6d798ff68d4ee79fcb3f2d6c01ad95f2b88341b02b003bf4", 0x3b}, {&(0x7f0000002980)="0fda858e4a1c8013ffdd3366d6e090aadf91768707ce239ff614eeae8d50cafc999c1de59719558072fea334805580fe750b91a0fc6b08bc69ffdb0d7b6ba30f31c9eac9faf5c7508fe9b3d8f8e60a98f8912aaadde17e6ac55ce69a969478a152a565819ac4ae22cf1207102a1218264a080391a229c3792a25568f00f57603fc3b68f442dded2ec24fa356a9af5365e31406b0a8085d35c14fee54d1ffd737582dbde538730ccdfe1076399c", 0xad}], 0x4, &(0x7f0000002a80)=[{0x38, 0x10c, 0x80000001, "fbca0f6c43cc40175667e34dbc3117ed5dde77dec4b0dd1c553d7e7c9f086e4ac909dee8feabac"}, {0xe0, 0x115, 0x7, "4e6da8b12a19d400bed8be41143d077a6432ad3a15eb38a40901719634501a7c82466a6428c013546e6d0bdfbd469fd652ba2158e2c0ce61748edfa9f4e3dac28716917319fa2ae888905e2d3d6977f0352928c00aa4a42036550e2ef5404470d3040e2bac8c51b9dacbce01756b0f1aa9e2f700ac2e9b19b5a3e8d2e4e953fd401026e16354846e692ea14b7af8f66a3649a91f1bf5c1a1c5ef6e52b265ee7c9af8936c01098122539c4cef0f344e7681fe85429adf7017b2ff4dc9313a3edb9898ea7921b593c49ff8a32a5059"}], 0x118}}, {{&(0x7f0000002bc0)=@nfc={0x27, 0x1, 0x1, 0x4}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002c40)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003c80)="05cee74cb52c2cfc3203ee450b158f2c681f6a24847fe160511a9aab6e764c22", 0x20}], 0x1, &(0x7f0000003d00)=[{0x28, 0x29, 0x401, "690cec514ef465334dae4f83df363c4a51eb"}], 0x28}}, {{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000003d40)="8ed31b9ecbe9efce312f845223559ee0921ac3f6fe561163049542864de01c6267142de735d85d30ae8c17", 0x2b}, {&(0x7f0000003d80)="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", 0x1000}, {&(0x7f0000004d80)="37210a7af7a27b99b8d7eb394e48ec87d5797ab02a6276562a6977ead2931940f203e6b3", 0x24}, {&(0x7f0000004dc0)="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", 0xfa}, {&(0x7f0000004ec0)="fcb71e80490455f7e0446ec9e6179a2145f29cad4a52deccfe034ff59611e659b93add45cdcc2d0193d922487cfeb66cb98d7446ff594ddcd5545f540f8498cb79", 0x41}, {&(0x7f0000004f40)="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", 0x1000}, {&(0x7f0000005f40)="24215ffa374f62c9b0690ddc6a1236ecada38f0382d0948b539474661958842fd4a5e75e7889637c4754fe97f6409ffaef63590e097e4932", 0x38}, {&(0x7f0000005f80)="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", 0x1000}], 0x8}}, {{&(0x7f0000007000)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000007080)="a85ecd27525abc6347f01351aec316d48dbb53dbe1a7e199c466b9fbcb03295cfa1890bec73a08f51fb2c6d1ea2a6d3fb94342108c6101cbbbbd06839e338302cb7b7e17ed89f28ddf35b126b5f258211ad0d558240d116669750ba647dbbfa362ea2d83abb43f0df51d212673210f4b3a820292733a0c4c15e05e7e2190707d3f9764877d85597fa50bec12a11167cea6dfb4eda0019c734b3735a4b535a59a1909b1dc0058c750ded7e74a50fa08b353f04b3c33ca99cf2c71de9d99c9f4ebd13b1cd5429f30442b07db4efd0d987ccd9f8efe5c755e030a", 0xd9}, {&(0x7f0000007180)="36a01d646f937c34ef74356da13534cf209e96f53244a361f65df64e2ac0b288241a9fa44ad7c5efe6b1e496b8ba219bd88630aa6d178a0ea84aeb9136f5f3c6739de5a6a5816326c540fb6544a966443a8e2c3222869232a687bfef18b5578c6a5423de6d31dd9195a01c717d80c15c1dc99fde73989f06a34a0e729fe0230201496fcb2050834b300f30165eb3f7c5c207e6dfae588cd628340b1765bda629680553f951f9c56dacc6bcbdf993", 0xae}, {&(0x7f0000007240)="852d845be1070df29d07876d72979978a013a891cc6435bdb2768e2e47ace1f4b58028b2e4f96f2802293c8615497ddc9b43dcfea6823189238a03bee9c84202959e433dde3c0cb391dc4009d3f227bfa71ecbd6eac0bbb106faf05e17e708fa2c9c519413dabee3b1378240573f5b3ce2621d090b6e09f731a81e9ffa61afacf7c8fbc3cbd96915927b6e6f080ddd9cc03dc9026c7bcfac", 0x98}], 0x3, &(0x7f0000007340)=[{0x50, 0x0, 0x3f, "0d246b0b6d383ddd169300b7263527f1b19dc2abc52379001565971bbfff904fde53f2004025e915b4b0a3483d40c0f26060ad5562b332d2c518"}, {0x28, 0x102, 0x22, "afc2c9eb63e0f73e17531031292bca2c8f9154d6440d3d"}, {0xd0, 0x1, 0x2400000, "1b88f9ffdaf8f497e42be6bc1f994d8cd0c12d7967258942ce19e0043aeef3bcb459e313df67a523670f1e59a83bbd9eebe77e5e0139f66c9570a0e31d68e9d37213dedba165b9910d10814bf6e693392775c5ab8bd760bd4e7a452793bb9c3ea0c7b65a45f0da17ab01155928a290564495b50e5447a1d49001d5907d97fa78a0e39937dfa01b0845d7a6754a570bea353d0b69906bd8450aa7a06941bdb02cbe7e609dfe24c6af42910d41a1075d7bac8832fcc9971d4fa8"}, {0xf8, 0x1, 0x3, "f385ef7600c3eaabbb61c1c29be45a105fc74f693c4bf1e34a5679a66faabfc37eea99f1a6ed76ec9ee35ce951f61e85668a71bedad02042e022b8f9e678b5b13e1a259ff2ec200ff83c5c338b59fafb919fe09b3ea556cac7e0219a96fb9ce27efdb2559873e57793fb00b0faa393083b9fb690da2f7f74dc00d1a3c2f2e53978246fe6bd28526a3306a3006e00f66fbfe2af575798947ef4e2905e344dd0069110c0951333dca98dd374af52bec9799a54b418dc40e7882aa3a57f2c9920945c9186d0c55f94c0bf58c0999016e3207773eb53ade485e07a687217b3090114f529"}, {0xe0, 0x10f, 0x400, "0f137377bc0877e6c5d26580fd4440ddca923d6bd38e4ef8c68ce7cd275894e3b0ccaecdee05097c3159b4c93e5d82d9ae5c7cdb97fb0dd3b5a9f2c5e21ac060b540b35524a71612f9e424dbc1727c51ad44ba8d7c235b9c7be6665923cd5f7e9474b1cf6a04f3e5ec6035e25111e42ea1373c529140fcecfbb97efab2e6b3b5f92455aa62a4674168628f42bec99c5d838b4653f2c7c1035a4aa06c92267a060022cd82763e954fa1cd6a49c75d1cf7f9f649b7d7463b827f509d8d2f1c2ff57b496eb79903642c14"}, {0x70, 0x10e, 0x9, "02f9d87fec5f41306660446b13187f959687f26535ff77dd2741940ca4f5bec2dc2d7d61bd66d0d760fbac3e28ceac9fcd89096a5985229973ed8858a47f69586452d3b379fb1ffa07115389d593d9e7840ca71f4fce56097e"}, {0x108, 0x112, 0x5, "4ae022a7a40bd52893c0e417ede8b4dc06b5731febaf750fd83fc0523ed81bd3eaa81f3b852c393d1f0584aa0d51aacbcb4889e85f12f63e82696088f9a1456bc8dd91a7c1f6a4edf53e3e01ff8bbbce8ceecf460ff8a022917278780eef9c0892de2d0746eb2c10bfbae3ea16b811cd97e2463a6c5966789e2fb83e3df222692bb65e9909c77d52b716f28b962a5316ec914d4731be28c618ccd7fa46200d327649a3a7dde42dc1d4f8b3dd7c0f92d307ff603c42020a2336504c90a4047d441bb8a0327e8127b0950314b4a171348416f53c5ab367bf2ff90e2f60bc5f629c3d470313f50e233f47211d1abe0d7c2f139b0226c2a0"}, {0xa0, 0x107, 0xa06a, "afca1758b6dc98f55a98a296dbcfc19d0f1723883194d4d9403905931c01bb2b6f356752d9e75234c9fbe092baaf7b84bc8370791aea97c216e1e0f9c492d470b5876b8b2132360f55e8a64fe7f9374570005427c6a49bbbdd9687c9a14298c10bf212618346b32ccd3397b21b8cc252e2075ea9626dff9d7792dc6d6a13c8ad948f27c5f632a36a0da8f7164e"}], 0x538}}, {{&(0x7f0000007880)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f00000089c0)=[{&(0x7f0000007900)="e3a5dc7b11f02da4a9c47474deac33ea9baec91f5884fa316ed653d7624a01a8d4288429367319131a431394bc860a7c45df44a88ef95d6c79b76f069546dae8e2", 0x41}, {&(0x7f0000007980)="74589d175662c7c85128e78fbc3f87ebe8fe771cb8e6fc1b73dc328c22e4f1500529ff87f2", 0x25}, {&(0x7f00000079c0)="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", 0x1000}], 0x3, &(0x7f0000008a00)=[{0x38, 0x116, 0x1000, "69f2361ce3acb892bcbacc04062e52327c52aa2bf798a6c665a4387c3cf3626dda2d3dd6233499"}, {0xf0, 0x10d, 0x9, "385f740729ceead8cff844201fa30bc290a5c02438d99ccbaafd9dc97f0f9064cd6819253dcd5fc0c84d5e856464fcb6d3a39e15cddcaf87931063fc0e8832a80ed4ba805fbf5b1ad39dac14da64a8624d990e7ba463753a15b708face38278044d6248351053435942cbe5e02e8718d6c9a9b1bc8ae0b15817971f3e659b96fcd812cea81158a3e497cba4cb298cb7619d08f0a6e627d64549399162e4b525c7da82eeba01a12c7f664451e3aafcab1deb3060dd7acb3d46a6f5cb189e91f25a8ecf3bd3e5e2d3e8aaeed9a9655788ebe950cc2548b2e841bd28a24"}, {0x90, 0x109, 0x2, "f374814733765fb6b199a9ad75e72d81b70f1a2be76187cf20646d79285dbed24201a75d9f4bccb73de9128fad6d3b96f2502225af671267a7204795903536e2606f4ecf760b05b30654ffbf952750a3fb809c48f496f43a14d703d56e8a16368819eeacb83c24a6a00dd558364604a8d1a6ebdbd3e7b80b732984539e"}, {0x28, 0x10a, 0x4, "71808c54d0d1e40c650aa772ade009810d7b8d7ece"}, {0xc8, 0x111, 0x4, "237e2f605a7d05828619441b95b399a54df6892a108db8f048a0222a988c76eb8c22821d7093921abfbc2d39a84a836fd2f942d504293e395359e52468264034f2adbf4296998f54d8573fe1b074aa15595f5b3508b29e4b80d1a6bc76d7f13171799ea18382c8effe86aa965e67d3bbfc6960e9afd71d02c9641cf2ac3bdddf408ddecc2833b765e5c50fbd0d34aecd6ce9ce00ece75255cbef3ee1bba1606b483ad1995763793dedc89f1a3b52d6a45e"}, {0x1010, 0x111, 0x4, "9fb81885e7f862154214d9f8a2236d9547091ba4aa862382d96d495f6015ee80a09f30fcf28ac3ce03cf4578d7cab001755f6ede7cb3a6d64ef56ef50fb16c26d3f5d033456e7dc44e301de40ffd85bf8e3d0fb1983956263d3415fe6542e23317b842c7740af559d7c41f095c53bedb38e2a1864523b3a2c7f39417e420f4f2c26667a986584486af6fa04407e85e6e679dda19268dac1c8cc3c38311696295885d6ac05dae25d6750598bd0cadfe36fa4f0fed1f7cc3d61c4ab26e690a114ea0fba3860e6ac71a3e9cb5e5f4af7c39876208ed67c860b286b81bf0f6c31303996cfbce4423e4778d96f8aaa7e1f97359b445c5f2066b43870549bbb5bae13d21616ec8355a0fd1d9057411e4b0852524caa0790db618c782bc3d37b775666f3ca4a9677062c40c95691bb79af7073fa2c64f970e5931e31598607baeb92b1f5045d579e42fb9fbd50d8b9546b3acecc21ce96628808254c8249fa7fb46859fae3af54cd63eda64fc956b5b020d13891ff28c297f7f7d1fde2b63101e921e20ad4cdf459cb7a440f797c57924492a9c646f47702b93d3d2057db2c11b3fe38b1a1c278b3da5bd0c760ac9460a2aae7d2b3cf7100d533850e603be8806adcf28cf87c5fb7a41ffe147afdccc2d25374bf7eb7f125908ad9c1f68dbef384e94a0a1ada23de01487a2491f486fc84d03f4b40d161128a47e1a803f34432a7988b5ea31a577376ba40dc70ace38ba3c65789b89352ac59ebbf881b12377db48cd77d260a87fba9a95e5efb573a31d7c85247d715376d35a31c5f97cbc71838a35e9fa4426bbe0492acb3b78129d697759455ba21b7ad71c5f12fa00c4ba635dbc4ba5daa1d05f8a95c569a21d41cb68dbcca8c9dea0d3f9c1b4d146f5cc70f18eb3284fef7fb3434d81ee23a33adbce9494801b2b5bf8438df335658dd52a906ffe9134a28cdea85822022361c2bea0ff72c82acebfc593ccfa418c082e88ed5dc5366e036b1b03ac1015050c1bdbc489080b700e0a1f2de4c6d5dcc7c0ec2217f9b15e95056a9d8f5c0cc0ade2d897bdfc3e7cc7c9cb8d3014650da359d92be38c511fce73bf4e7af42018fd40f128af8305fa1fc5f3fa42c1577a783742cc8b06733f0f44958db9fa9537961826588154d9da4e10481a4d1b9d0ba6696630801f90783f9899b8d2be5bf12763527cfe8f9e400a18c14b8cb2d08434c7574ab57ba7c96b51d4e7ee38186f12a86be983e1164654ae8778511781a6d9d4b731d8187152304f039706561decfd90c37831317a77e6fdd8e527621a4e9f52f406eee4d956950f8bb23e6301c1fbd388d67d321a7a9bca0c61fd2146a1ca5c08443fadacbe76a4fea0f8c98fade80b3c9b767cb8c29783eb99228a3b78162aadf9e43655eab5aac1c36edb5e9b55eb0a17be7c69f8cfc0993e7094dabe81c821bb22d7186507056f8899a71e2f53ae8487a90fc84930dbc7f89e61f7dea003eec0517f0acaf59907f3dc89713446a65d7a1782f2f352684c4229d9637126cf66bbf823027c172e24cfbc973be67b6fb76a24352da789683c18d352fd8f3551dcda32e8c044b74184665954bc9fbcef03bcc35104ddf431f090e06fea3be6edf038615541bfc50e491c5d41cdf44af6503c565589c4c804a9345dffd3d95d801af9622c75a032c64703b062db2ceb08c94d4c4987f5d06d2bebc43963c57b5f304522230dbb4afa55a12667c363e396c5e410e8768b5f499ebf54c90f857959fdca4f9fcca7424bc7391a11aedeb2f1f9428d65528046aeed4fb7a341eb707f7c7a154fb10c85ae69f16072b73c804069212deb02e625cd993c82db34265edb9be24ddf7dcbb54bde7308b36703fa7cc878c85cf018d514c7ebb9b16638f533c87574c9e187f8bd06db9f369a1054fe6623b7369fca46e3bc55e322a4df40549a9bf67654fb1a49b6b70cf46bfbd0267a8c5d37e3e009ab3cc627b0ce34d7ffbb8ec33690142289beaa8a76a681530d45728d3b2f8fcf0d299638fb4c745eb026d15be6cec95d62bd7cf2b8f1fa3cb0fd1888006c7fb9f412d4b581e710f343527fc9f313f347a5541923dda8756ee649b42639696169d272a7b9a70e9c379ac89dfc823aa7db62e1a41671b60d153dd12ffbc916b3a51a30ee9b355f4d30a7f7e82767bbe78fd2612cb2b8643cbff956faac30c94cd7910f6712a71482998984a9cedaa9788b236d910512881c329a77125f06a2154fa0e401fe432c7d2ea875acaf1e47a6c397d835c7184cbb24ff4b87f1dec2b14891fb76707af41cd975ba88fbd09ca7cfb66b55fc0152f88dc5dc44abbebf84d7e241551803d30cfebfe7cb0b6802d87a109e185098e515da347ad211b52ae27d6ecbe883eee7cd50bac93e9590b847bef4dde52e73e2c7e3151b4b06888d5831997a90cef047264c198b3001494424c03e5b6c287121a3fff70015d0ced10724373535890e198f625f1eaa0967f82e70b2eecfe8869b589388d71ef3854703ab85963ea3ea4a148e2f36335b706a497aed1ee15177614b55faf54331ae5d8b54bbbd2566167ee09cf03e791db9eb14472c3236ced60bf7195f6d9591456609c229e3c15b149702752f64c6b12baee46016d9ff12ac21df6f28ea0312019e8d54b0e78fd90904bd3ba17a61d6a2ea475fb1835ce928b7755c4397e873fdb6c17468f2ee313028b0d329a72a24298a74d0b6554a097f07cd88c637b028fb80d8ed42fc58cab6d1da49a2a9ee9cf33d229f844a6b1e1dfe3bccb6dd8175345afe2a7a49c108d253221c7eb111c15b84a8a2e85087853aeb184dc6a5e968e4294dcffd04821df7a5f8a3ba86c34c61e2f390e2e1c0ab2f8f6c9da8d1ace539f7c83c994926cb35fafa09ba5a3204c24ea466690189f694e587c58b48be34c8f0243e8cc1d3633887558fa879be3745a2a431a9d4e1030e8bedc6e5a464b2861b55e7bad4ebdddc734392e1fd6a17ccec416ba4cdfa321121ad3f475e5f90c8de53ff9105753572fa52866710116acde82e60b5dd99483e46c3b6919b2692a0efc1d86f189604fdaa50fee1ec65c31d7642e5e1f9f800ba4d5a4b4a3c0630c63eda15b5b7538d35fd3675fd73e6ce70a24370c577c3701772f5d995299bcc5ea585b49bfabbe51239d8b1863fd95111db29b596d046c25acae1e8f9c25cd081e05b8ae43d698b5846ead73492b1516abda45d6e15551b020c802c1d8d9879774360625cca65ae92fddf2766e6663c9d80b5bc197f779aadfdde10240561bb911b803ee1fad07a3ebb31a050bc4a0878ecb16299f9e94584dc864d90be4a8c094cc6dc67de5eef1c9eee4ce58fadccaab58b08d58abd72793506cc69fff0ef5fd098c702e271e47d26afdc757bbad0fb1258401d7357ec96bd4f4c7bab42c0c8593de91ddb43afc71ee2b4f40ab9e07db536ee0ba5e76c0ff5c3b06b777eaa2926396bc8a2540d98bcc28aaf11ed31deab9ff1eeb4c900af146d5f5f0185e76cfef7f4575551cc74d4ad9654f7003db7a5043738f7e4e39d87961b486eb3d708d34f92a8840177eb0b9e0a8f23e6865af6b011df2e46e99225ceb00fe5bbadd143aae65ac7e00cecdc5623d60c298cb699e3e4acc8e883adcec99605e75c9b969cab2f05da874aedd0195cc136c7bc3f3abd688f687f0a655708f84639242e32c6bcae671c16e1eb7c8041d4530bab6ffcdda9be28898d7e893b961d9175e7c373f12552fb55f26c733ec1269c04b33e033601c88bd906c904eb3b2534af82c11f50e502f1d69074ec4df8c639e288626d8ae6befedf523bb4e5c75859bc40fcd39cf0c2f683c3df5288a5add58f4b976b92dd39c3d4662e45fb0ae90fa2b61032ab31f764e93bfa029ad470716c52d09b5eadd2f19e9012388b3f327b89a12d787e734fcffbe28eed867707ae31d04e4ab8318ca084bbc44556e9479653adc5340c65c833bc7be7c99acc24f5b32b4f15b3705e1d38f77ee2b6eb4d71d988313b4e7edf67aefbbd857f4fd5de386d77c05141ff4b9de215ceb8121f1e06499c9ac4a1a5f8f3d750502f3d8af78b8fecd6242bc4bc3718ed6ba99ecf6ccd82efcf5e3a7423d71c8a5eb0a27d84ce1367792f0ba4c99502ef4a8463c7875895cebe4117fc980518c1fba53cf86f3c286f7281e9dfec375b6dfb3addb610c5ecd52949f2c51ceefbf02900ca57062667f587dc717a7f68fcf9e61ff2a49dc5ee1b303394bfaaa8528dde227185a3e09dc86973c9a54e5180f94a4e157fb23234ac0e847b8816a165aef5ec7f49eb5b075663678919363b0bd7519df2ef86595bf787b681d3e1ad1d7787d006fb34c732596525fa1a92346b8f5428facda9dd202946090bc5afeaadcb2c790ae24daf902d35728776c34b4b8353a1c8be88b64040c753fac501c288eeb3d9473605a460404daca4d0ebe186fd1e003e2345a45dd396bc7ef2a4c924f5438e80aaf9f8831cd3b30b025da784ea54f4b68ad91f65b013a834e62c1483d209a745998e4498d08b27d07f7ba36b6fcaf3eb751c9e6fee2b20e805f5cd22d8ed3d0e31c1bc34e8b2d2081a4eaa6c842cc01e5ccdedeadae7ac2e6dcf72d57037a7458fa85104f25132fb2099b17257791a48a53525a1bc194f75bb7bdfc56d4742154f623a94a137f5427a6768dc1a94bd45d9062b58daf354297f9cfa1b5e60f74ac87ed1f0c78a65ef44a847dc627391b9159debd86505961d5e04ce2f6e2a28986c39fcaebb88f3dcfc643ffde5566bab856befdc09aba9c25672a5d9390acba876f059048bf9f8df9a4abc87ce449d21dd89b36a954cb375d88c67c84f97eb2534d771f37286071a9b2a9c4707ab2fdcf283812abf6a519373b058640a6aa3c994c24797250255a880830e29528a1cc6649fd8e132942dccc97352f3bb9e087ee200ac8a451257e5a43d0ebb8e828b0c7afe44ab0447ed462bf16b35cb35ce3da32ae155630af351f703d26120f49b6fcde73e1fc334692e9425b1736dfdb513b7e25d94133d022e62f2d74cc1a724f925144e10beeb29ba5e686359061b5e154c006e21dfb665cfa9e899f3027d529be88d6cec21fa1e259aecfad5bb85e4175cf53ab441d8ce3b6bb084c879bc40a84b9e6da9bc40047cf29dc9eef2d2d6b497e17245407035c2f9927d7d2bd6fcba2ecf4c518c417acbc04867340f9f4a9856a5bc0ccfbb47cd070cf8f71d7892b8cf11f79b3a7c91cdca86d7687380b6112aa114af5f32f2c856befbdcb7ab3262514b03885e79fc1aa9430cfcdd2cd252cc0900182edf39fdb8abfa4f12bcdc2bc4875d7f2102904a8a6d6203fe1d0236057382607fb753efa4d2765589bfeb5817c38f91690b3ed97d0c86a46bc73a34fe127f0eabea05e9a93891203d61e82b2f56514bc0342508232f15af3afeb556bbe14937c291f3440808d5e785c639bbe23aea49098ce4d29f1bbe092baac3e1443a925e3e53f63ebe4b5e524ed6cd8a4d8296f6cd914e89b74a75f20fbcd18f0b86330fe0b1827ee45a7ae482af18b0bbc3394d39959ab55ef4addbdd2221c43800c013dbf130be730824caa7a1586035417e211166d8a6d1d53c66214511fff1ccc0b3232d588e310a83bdbfde2c3b7d197e1d5b09f4483afc9834e68354a952ab4f8f815658966566cadb417b4db0dc7f739664e15411891f7349e7fde11002357ad006291c2c7426b569af2ef9f5ba879d41cbd14ac6a0fc3781c02d89801b5f5ab594beb4bf5d8c35d82f888d9ed4d6f3b2a3d8b7ce5cfc2b4cbe46dfcb2bdce1975d"}, {0x20, 0x116, 0x2, "3054ff8d4e7eafd81f3674"}, {0x60, 0x10c, 0x1, "53fcdddcd5717ddefec61991c883595592a7818b646fbecc4f03e9856daa17aa33d0bfb17c8e97379933b6f7a45a96f1fa0a6ce1e747b480ffe1c464b129e419049e64439ef7e8b0592fbe0a52"}, {0xf0, 0x6, 0x9, "e0508cb8b55670f5c0fae0a14456569eb62361ee5d9d5f757df427aa4a2bfbf8758f9693c41def5ebf8e90cceedab77ac30be23e83799efcdcd0fb2119dfcc9ad97a8c13a356998c4351abae5b1e821791c27ab6b122fad0b54c98f6e6b24c8e29ea663f2396ce36fd73bd99a1859cd9ee2df28fdbcb1fe7b82f90d85d026a89130401db59a8d4ef2191dcd56f79564c3e089b71a352895c0399ed62a437a836e9c134fc10a3d65f0c06d19f7cf1acc9c76007ad1ca07555f95992d65ae95c16e8a538fb17a34892043f97902bc3f590fc2d382f19dbbff5d8de58d9e3e0"}, {0x98, 0x10e, 0xfff, "ed4e75eabd2f3946389da79f9b73eda5e871045f5c01145a1c110244e4032b350538d5170ac12cb61d160538ec66c351496a598fcb48ad73f5f0fae3d16e562f76a68ea5a6df7b25a8464e87563d985428452be2889357e52da776833ab2d7ce01ba95220397427ad3ec49e4d4bb9ea92a5180315ae838d6d379a87de2aef4e2a52627"}], 0x14c0}}, {{&(0x7f0000009ec0)=@in6={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x80, &(0x7f000000a100)=[{&(0x7f0000009f40)="8e51b1b7d91b6a5302e5ed5f8feda0333ceaab74d9cd59622cb619d6caed12e617ba29b69741172bdd51984079282e8af4e987c97bfa2be9b70e5133e71e34457133d7cfee96fa35ddf766ed27ef414f420c035af6bd5653f0f8231f15cb357097407ede71663c10095b0c84e9285e4c8e4b15836b2fe9c6ea83c54676dc3affda74add9859e3a96d2b6909c45d6d61030a0a384b04f979a9411fae7e82602e1e129ec94547ac369609b588dd65926de5dea0cf7786c6f4136b96ce323ca39ec87a338f91b701cc1d0e5", 0xca}, {&(0x7f000000a040)="00e3e7ce", 0x4}, {&(0x7f000000a080)="b9da94b67f4b6ea7d6cf100b9ac5311707f260a21b8cf05222e9ab99e39bdbbfac9bd57b21d355e08b18e1dca2b005158082f77f6430a1060a5fa7c057a2f5075165", 0x42}], 0x3, &(0x7f000000a140)=[{0xb0, 0x6, 0x9, "ce6faa82a6fb229dcc235816fd4c57dec085ce3e8be877f21edc52175b7d83c553e963b35a7a906c549e703239464c8c7fa3ddb78c11b367df43732d4aeab4b056e452c0f041529c5ac84cb5f6a5945122b5d17342e2a9d7fe31b3efbe533b67b5f8c1284359c0deaea28cc5e038d68b512217a3792d63e15391d5d203485fb97f43a52775f36df4db7926f838306b9bc582e6d44656af10424a05"}, {0x28, 0x118, 0x9, "2aa7becb3f24de930898a67dde1f9b51c608bae470"}, {0x10, 0x1ea, 0x1000}, {0x30, 0x114, 0x80000001, "96f80165d1412aea6316e93329a467fe38691e6fc60a4927894f33"}, {0x78, 0x97, 0x1, "cadf5536279a19b11d9e654c21498e012da61e14ee141ad6725f45f2ee4a903bad1289dd19654b6e97ccc1e2a2ce3022e33ac08bf804659b0e30ba72ff13f7cde4a76a3596298a243eb4eca65b296748da32ccb1ce4ae963cdfc51937ae950275f3de4a8db05"}, {0xe0, 0x10c, 0x8, "d7d1361310a579e71d4d807193500943d32415104cbaaf3c9af9176e168d0aa6af978f79af490c2cbef6dda16334f96ba95121b82c7dfdda7db24499f0ee34a77a24b907b6722c1c18b56e0857a5ffba46d65e3aa86ae910c6ba32f7fad08c2476015eaded1f148fabdfa92b714ff1ef1fdfc2bc4e2262cf862b69e3104a2103a20af76a424342f96bf52aaa4d85cac5ee8970561c86a5b470c2835255f9084276d6791b683ea20c11c0baf23c746b77adc68ab9f0aec0b6abed811948cfd6a81c89b53ae22fe6ce661731f284"}, {0x110, 0x101, 0x7fff, "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"}, {0xd0, 0x11, 0x3, "48b37b31ec37d54e5adc61cf02b0819e2671bf7da17e7cf8e916b6d30c31d157d1297a667ceb6d38aa654217e84ad31316d473b5c998d3cdb99d86122561c73dee217670c09c1086062b57875a1b5f47cf407923db52a5f44bc7ddb6e831959372b92f8928570b6eb435ccdaf1945370c988c5e93e11816303939a69e212b6fa3d6c6892a36f6d350defb19140037723f3ee0af9a35a6b79a36448884fabc32df67cf94aac28e11355df61f04292998d351f4348a545233a4c"}, {0x50, 0x10b, 0xfffff000, "db391704c513d964ec3b6650c337c079ed7d7f864ebc3d8477e3281ea7c324ee0dd2f9fecc4bcbffc28c4da03a56d606224ad653b8a2343984dbff0f4e"}, {0x60, 0x97, 0x401, "245355057ba769e895f7bce6bb9bf527778dff6d46c349d640f036dc1cf9601130990193a2e9bff1fc6b037b02b387039d4318e670167dec1a02231c10dcd22522b8c6cf6a3b6d8cc07838230a"}], 0x500}}], 0xa, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 723.933651][T31734] loop3: detected capacity change from 0 to 512 [ 723.943548][T31735] loop5: detected capacity change from 0 to 512 [ 723.956046][T31742] loop4: detected capacity change from 0 to 512 [ 723.966475][T31734] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 723.977974][T31734] EXT4-fs (loop3): get root inode failed 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7a00}, 0x0) 19:04:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f01f800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 723.983722][T31734] EXT4-fs (loop3): mount failed [ 723.989428][T31742] EXT4-fs (loop4): bad geometry: first data block 254 is beyond end of filesystem (64) 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x11, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffffe0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc00e}, 0x0) [ 724.084133][T31767] loop5: detected capacity change from 0 to 512 [ 724.113457][T31734] loop3: detected capacity change from 0 to 512 [ 724.116426][T31776] loop4: detected capacity change from 0 to 512 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x34000}, 0x0) 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c65165334904"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x400300}, 0x0) [ 724.146520][T31776] EXT4-fs (loop4): bad geometry: first data block 254 is beyond end of filesystem (64) [ 724.156486][T31734] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 724.168019][T31734] EXT4-fs (loop3): get root inode failed [ 724.173639][T31734] EXT4-fs (loop3): mount failed 19:04:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000e0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490f"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 724.278013][T31810] loop5: detected capacity change from 0 to 512 19:04:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003ff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) fdatasync(r0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) ftruncate(r0, 0x59) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00fa00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c65165334929"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x1000000}, 0x0) [ 724.329090][T31821] loop3: detected capacity change from 0 to 512 [ 724.355056][T31821] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 724.366576][T31821] EXT4-fs (loop3): get root inode failed [ 724.372231][T31821] EXT4-fs (loop3): mount failed 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2000000}, 0x0) 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533498c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 724.415805][T31840] loop4: detected capacity change from 0 to 512 [ 724.422323][T31831] loop5: detected capacity change from 0 to 512 [ 724.423272][T31821] loop3: detected capacity change from 0 to 512 [ 724.438142][T31840] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 724.467860][T31821] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 724.479384][T31821] EXT4-fs (loop3): get root inode failed [ 724.485058][T31821] EXT4-fs (loop3): mount failed 19:04:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f03fc00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x3000000}, 0x0) 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x4}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000f0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000fff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4000000}, 0x0) [ 724.576900][T31870] loop5: detected capacity change from 0 to 512 [ 724.615908][T31871] validate_nla: 4 callbacks suppressed [ 724.615919][T31871] netlink: 'syz-executor.1': attribute type 38 has an invalid length. [ 724.628103][T31879] loop4: detected capacity change from 0 to 512 [ 724.644002][T31879] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 724.670101][T31886] loop3: detected capacity change from 0 to 512 19:04:47 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{r4, r5/1000+60000}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x5000000}, 0x0) 19:04:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffe00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x5}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffefff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 724.701084][T31886] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 724.712620][T31886] EXT4-fs (loop3): get root inode failed [ 724.718335][T31886] EXT4-fs (loop3): mount failed 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6000000}, 0x0) [ 724.774245][T31907] loop5: detected capacity change from 0 to 512 [ 724.791199][T31910] netlink: 'syz-executor.1': attribute type 38 has an invalid length. [ 724.795693][T31886] loop3: detected capacity change from 0 to 512 [ 724.810933][T31911] loop4: detected capacity change from 0 to 512 19:04:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0fff00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x9}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7000000}, 0x0) [ 724.821722][T31886] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 724.833242][T31886] EXT4-fs (loop3): get root inode failed [ 724.838877][T31886] EXT4-fs (loop3): mount failed [ 724.860561][T31911] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000100f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x8000000}, 0x0) [ 724.888873][T31927] netlink: 'syz-executor.1': attribute type 38 has an invalid length. 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0xf}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 724.954813][T31940] loop5: detected capacity change from 0 to 512 [ 724.978313][T31945] loop3: detected capacity change from 0 to 512 [ 725.010389][T31951] netlink: 'syz-executor.1': attribute type 38 has an invalid length. [ 725.018590][T31951] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 725.019017][T31945] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.038370][T31945] EXT4-fs (loop3): get root inode failed [ 725.043990][T31945] EXT4-fs (loop3): mount failed 19:04:47 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{r4, r5/1000+60000}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffbff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x9000000}, 0x0) 19:04:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffeff00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x10}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 725.085949][T31945] loop3: detected capacity change from 0 to 512 [ 725.099470][T31945] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.111033][T31945] EXT4-fs (loop3): get root inode failed [ 725.116657][T31945] EXT4-fs (loop3): mount failed 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa000000}, 0x0) 19:04:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa160000}, 0x0) [ 725.141016][T31970] loop5: detected capacity change from 0 to 512 [ 725.148165][T31971] netlink: 'syz-executor.1': attribute type 38 has an invalid length. [ 725.156321][T31971] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 725.169304][T31972] loop4: detected capacity change from 0 to 512 19:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000110f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000002000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003ffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 725.202703][T31972] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 725.234646][T31989] loop3: detected capacity change from 0 to 512 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xb000000}, 0x0) 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x11}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 725.269342][T31989] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.281035][T31989] EXT4-fs (loop3): get root inode failed [ 725.286658][T31989] EXT4-fs (loop3): mount failed [ 725.316331][T32004] loop5: detected capacity change from 0 to 512 [ 725.334963][T32008] loop4: detected capacity change from 0 to 512 [ 725.340086][T32002] netlink: 'syz-executor.1': attribute type 38 has an invalid length. [ 725.349416][T32002] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 725.358529][T32008] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc000000}, 0x0) 19:04:48 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{r4, r5/1000+60000}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffff03000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001fffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x48}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 725.428560][T31989] loop3: detected capacity change from 0 to 512 [ 725.441222][T31989] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.452730][T31989] EXT4-fs (loop3): get root inode failed [ 725.458383][T31989] EXT4-fs (loop3): mount failed 19:04:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000120f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 725.510173][T32029] loop5: detected capacity change from 0 to 512 [ 725.518732][T32033] loop4: detected capacity change from 0 to 512 [ 725.531271][T32036] netlink: 'syz-executor.1': attribute type 38 has an invalid length. [ 725.546996][T32040] loop3: detected capacity change from 0 to 512 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xd000000}, 0x0) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xe000000}, 0x0) [ 725.553806][T32033] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00e0ffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000004000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x94}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 725.602694][T32040] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.614229][T32040] EXT4-fs (loop3): get root inode failed [ 725.619894][T32040] EXT4-fs (loop3): mount failed [ 725.657384][T32057] loop4: detected capacity change from 0 to 512 [ 725.671872][T32057] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 725.681828][T32040] loop3: detected capacity change from 0 to 512 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x10000000}, 0x0) [ 725.699122][T32040] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.705967][T32066] __nla_validate_parse: 5 callbacks suppressed [ 725.705978][T32066] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.710664][T32040] EXT4-fs (loop3): get root inode failed [ 725.731703][T32040] EXT4-fs (loop3): mount failed [ 725.737583][T32069] loop5: detected capacity change from 0 to 512 19:04:48 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{r4, r5/1000+60000}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x300}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000008000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000220f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffefffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x11000000}, 0x0) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x12000000}, 0x0) [ 725.886608][T32097] loop3: detected capacity change from 0 to 512 [ 725.889689][T32098] loop5: detected capacity change from 0 to 512 [ 725.900134][T32096] loop4: detected capacity change from 0 to 512 [ 725.907658][T32100] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.922366][T32096] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x20000000}, 0x0) [ 725.932636][T32097] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 725.944154][T32097] EXT4-fs (loop3): get root inode failed [ 725.949813][T32097] EXT4-fs (loop3): mount failed 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x116}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000c000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x25000000}, 0x0) [ 726.029342][T32097] loop3: detected capacity change from 0 to 512 [ 726.066179][T32097] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffbffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 726.077771][T32097] EXT4-fs (loop3): get root inode failed [ 726.083471][T32097] EXT4-fs (loop3): mount failed [ 726.111028][T32132] loop5: detected capacity change from 0 to 512 [ 726.118894][T32138] loop4: detected capacity change from 0 to 512 19:04:48 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{r4, r5/1000+60000}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x12d}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x28000000}, 0x0) [ 726.131684][T32138] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000250f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffff1f000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x48000000}, 0x0) 19:04:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x4, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4c000000}, 0x0) [ 726.218157][T32157] loop3: detected capacity change from 0 to 512 19:04:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff9fdffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 726.265498][T32170] loop5: detected capacity change from 0 to 512 [ 726.277860][T32157] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 726.289421][T32157] EXT4-fs (loop3): get root inode failed [ 726.295055][T32157] EXT4-fs (loop3): mount failed 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x60000000}, 0x0) [ 726.318515][T32178] loop4: detected capacity change from 0 to 512 [ 726.354841][T32157] loop3: detected capacity change from 0 to 512 19:04:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffe0000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 726.364712][T32178] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 726.387069][T32157] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 726.398574][T32157] EXT4-fs (loop3): get root inode failed [ 726.404211][T32157] EXT4-fs (loop3): mount failed 19:04:49 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{r4, r5/1000+60000}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 726.437221][T32199] loop5: detected capacity change from 0 to 512 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x116, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000010000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x68000000}, 0x0) 19:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000002e0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffdfdffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 726.519252][T32217] loop5: detected capacity change from 0 to 512 [ 726.527771][T32218] loop4: detected capacity change from 0 to 512 [ 726.529007][T32222] loop3: detected capacity change from 0 to 512 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6c000000}, 0x0) 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x12d, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 726.564887][T32217] EXT4-fs (loop5): failed to initialize system zone (-117) [ 726.574330][T32222] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 726.574394][T32217] EXT4-fs (loop5): mount failed [ 726.585843][T32222] EXT4-fs (loop3): get root inode failed [ 726.596401][T32222] EXT4-fs (loop3): mount failed 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x74000000}, 0x0) [ 726.607239][T32218] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7a000000}, 0x0) 19:04:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000020000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 726.690865][T32222] loop3: detected capacity change from 0 to 512 [ 726.716462][T32222] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 726.728080][T32222] EXT4-fs (loop3): get root inode failed [ 726.733698][T32222] EXT4-fs (loop3): mount failed 19:04:49 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f7fffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x0, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x81ffffff}, 0x0) [ 726.755615][T32254] loop5: detected capacity change from 0 to 512 19:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000480f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 726.798333][T32254] EXT4-fs (loop5): failed to initialize system zone (-117) [ 726.809292][T32254] EXT4-fs (loop5): mount failed [ 726.835894][T32267] loop4: detected capacity change from 0 to 512 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f85ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000004020000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 726.858777][T32267] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 726.876799][T32273] loop3: detected capacity change from 0 to 512 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc00e0000}, 0x0) [ 726.922336][T32273] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 726.926002][T32287] loop5: detected capacity change from 0 to 512 [ 726.933963][T32273] EXT4-fs (loop3): get root inode failed [ 726.945811][T32273] EXT4-fs (loop3): mount failed [ 726.951597][T32289] loop4: detected capacity change from 0 to 512 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x6}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 726.968055][T32289] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 726.983337][T32287] EXT4-fs (loop5): failed to initialize system zone (-117) [ 727.003413][T32287] EXT4-fs (loop5): mount failed 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xeaffffff}, 0x0) [ 727.026499][T32273] loop3: detected capacity change from 0 to 512 [ 727.041232][T32273] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.052783][T32273] EXT4-fs (loop3): get root inode failed [ 727.058450][T32273] EXT4-fs (loop3): mount failed 19:04:49 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xefffffff}, 0x0) 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000030000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f8cffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000004c0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 19:04:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x9}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 727.164270][T32331] loop3: detected capacity change from 0 to 512 [ 727.167402][T32325] loop5: detected capacity change from 0 to 512 [ 727.182684][T32330] loop4: detected capacity change from 0 to 512 [ 727.194290][T32325] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 727.204436][T32325] EXT4-fs (loop5): group descriptors corrupted! 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xfeffffff}, 0x0) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 727.211173][T32330] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 727.221306][T32331] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.232860][T32331] EXT4-fs (loop3): get root inode failed [ 727.238502][T32331] EXT4-fs (loop3): mount failed 19:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fdaffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 727.298441][T32331] loop3: detected capacity change from 0 to 512 [ 727.316973][T32331] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.328530][T32331] EXT4-fs (loop3): get root inode failed [ 727.334155][T32331] EXT4-fs (loop3): mount failed [ 727.363072][T32365] loop4: detected capacity change from 0 to 512 [ 727.372200][T32365] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:50 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000040000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffff81}, 0x0) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xb}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000600f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fe2ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 727.462450][T32380] loop5: detected capacity change from 0 to 512 [ 727.489511][T32387] loop3: detected capacity change from 0 to 512 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xc}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 727.504306][T32380] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 727.514438][T32380] EXT4-fs (loop5): group descriptors corrupted! [ 727.522602][T32391] loop4: detected capacity change from 0 to 512 [ 727.544462][T32387] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.556008][T32387] EXT4-fs (loop3): get root inode failed 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffffea}, 0x0) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x10}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 727.561659][T32387] EXT4-fs (loop3): mount failed [ 727.570843][T32391] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003040000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffffef}, 0x0) [ 727.633323][T32387] loop3: detected capacity change from 0 to 512 [ 727.645217][T32415] loop5: detected capacity change from 0 to 512 [ 727.654404][T32387] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.665980][T32387] EXT4-fs (loop3): get root inode failed [ 727.671613][T32387] EXT4-fs (loop3): mount failed [ 727.678938][T32415] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 727.689058][T32415] EXT4-fs (loop5): group descriptors corrupted! 19:04:50 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff0ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xfffffff0}, 0x0) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x11}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000050000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000680f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xfffffffe}, 0x0) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x14}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 727.815330][T32439] loop4: detected capacity change from 0 to 512 [ 727.817491][T32447] loop3: detected capacity change from 0 to 512 [ 727.833041][T32446] loop5: detected capacity change from 0 to 512 [ 727.849867][T32439] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 727.866633][T32447] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.878197][T32447] EXT4-fs (loop3): get root inode failed [ 727.883843][T32447] EXT4-fs (loop3): mount failed [ 727.889554][T32446] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 727.899763][T32446] EXT4-fs (loop5): group descriptors corrupted! 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x18}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 727.918139][T32447] loop3: detected capacity change from 0 to 512 [ 727.932595][T32447] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 727.944127][T32447] EXT4-fs (loop3): get root inode failed [ 727.949835][T32447] EXT4-fs (loop3): mount failed 19:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff5ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000060000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 728.035098][T32482] loop4: detected capacity change from 0 to 512 [ 728.048568][T32484] loop5: detected capacity change from 0 to 512 [ 728.050144][T32482] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:50 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x100000000000000}, 0x0) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x34}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000006c0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0x3}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 728.076275][T32484] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 728.086369][T32484] EXT4-fs (loop5): group descriptors corrupted! 19:04:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003060000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x200000000000000}, 0x0) 19:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff6ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 728.181728][T32505] loop3: detected capacity change from 0 to 512 [ 728.207045][T32511] loop5: detected capacity change from 0 to 512 19:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0xf}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 728.223797][T32505] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 728.235305][T32505] EXT4-fs (loop3): get root inode failed [ 728.240956][T32505] EXT4-fs (loop3): mount failed [ 728.247531][T32511] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 728.257658][T32511] EXT4-fs (loop5): group descriptors corrupted! 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x4, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 728.281336][T32516] loop4: detected capacity change from 0 to 512 [ 728.295370][T32516] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x8, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000740f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000004060000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x500000000000000}, 0x0) 19:04:51 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffbffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 728.425939][T32553] loop3: detected capacity change from 0 to 512 [ 728.448830][T32553] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 728.460469][T32553] EXT4-fs (loop3): get root inode failed [ 728.466093][T32553] EXT4-fs (loop3): mount failed 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xb, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 728.473540][T32558] loop4: detected capacity change from 0 to 512 [ 728.492446][T32561] loop5: detected capacity change from 0 to 512 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xf, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x700000000000000}, 0x0) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x25, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 728.521346][T32558] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 728.541243][T32561] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 728.551378][T32561] EXT4-fs (loop5): group descriptors corrupted! 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x28, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 728.622149][T32553] loop3: detected capacity change from 0 to 512 [ 728.644345][T32553] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 728.655878][T32553] EXT4-fs (loop3): get root inode failed [ 728.661530][T32553] EXT4-fs (loop3): mount failed 19:04:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000007a0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000070000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffeffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x30, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x900000000000000}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa00000000000000}, 0x0) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x2, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 728.743098][T32611] loop3: detected capacity change from 0 to 512 [ 728.764170][T32612] loop4: detected capacity change from 0 to 512 [ 728.767412][T32611] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 728.781902][T32611] EXT4-fs (loop3): get root inode failed [ 728.787539][T32611] EXT4-fs (loop3): mount failed 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xa16000000000000}, 0x0) [ 728.798250][T32612] EXT4-fs (loop4): bad geometry: first data block 255 is beyond end of filesystem (64) [ 728.801901][T32615] loop5: detected capacity change from 0 to 512 [ 728.815769][T32615] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 728.825861][T32615] EXT4-fs (loop5): group descriptors corrupted! 19:04:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000300000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 728.858756][T32611] loop3: detected capacity change from 0 to 512 [ 728.884846][T32611] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 728.896576][T32611] EXT4-fs (loop3): get root inode failed [ 728.902261][T32611] EXT4-fs (loop3): mount failed 19:04:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003070000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 728.951466][T32643] loop4: detected capacity change from 0 to 512 [ 728.969334][T32643] EXT4-fs (loop4): bad block size 8192 [ 728.975483][T32650] loop5: detected capacity change from 0 to 512 [ 728.985537][T32650] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 728.995663][T32650] EXT4-fs (loop5): group descriptors corrupted! 19:04:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000ab0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xb00000000000000}, 0x0) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x4, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000080000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000400000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc00000000000000}, 0x0) 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x5, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 729.050194][T32661] loop3: detected capacity change from 0 to 512 [ 729.063118][T32661] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 729.074633][T32661] EXT4-fs (loop3): get root inode failed [ 729.080327][T32661] EXT4-fs (loop3): mount failed 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xd00000000000000}, 0x0) [ 729.120413][T32677] loop5: detected capacity change from 0 to 512 [ 729.133628][T32680] loop4: detected capacity change from 0 to 512 [ 729.143490][T32677] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 729.153604][T32677] EXT4-fs (loop5): group descriptors corrupted! 19:04:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x6, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xe00000000000000}, 0x0) 19:04:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000500000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.166127][T32680] EXT4-fs (loop4): bad block size 16384 [ 729.166579][T32661] loop3: detected capacity change from 0 to 512 [ 729.205049][T32661] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 729.216591][T32661] EXT4-fs (loop3): get root inode failed [ 729.222294][T32661] EXT4-fs (loop3): mount failed 19:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000ac0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x7, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 729.265379][T32698] loop4: detected capacity change from 0 to 512 [ 729.279997][T32698] EXT4-fs (loop4): bad block size 32768 [ 729.332124][T32713] loop3: detected capacity change from 0 to 512 [ 729.351625][T32713] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 729.363315][T32713] EXT4-fs (loop3): get root inode failed [ 729.369007][T32713] EXT4-fs (loop3): mount failed 19:04:52 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003080000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000600000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x8, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x1100000000000000}, 0x0) [ 729.408897][T32713] loop3: detected capacity change from 0 to 512 [ 729.422204][T32713] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 729.433786][T32713] EXT4-fs (loop3): get root inode failed [ 729.439472][T32713] EXT4-fs (loop3): mount failed 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x1200000000000000}, 0x0) 19:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000ad0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.457693][T32733] loop4: detected capacity change from 0 to 512 [ 729.473906][T32733] EXT4-fs (loop4): bad block size 65536 [ 729.485906][T32738] loop5: detected capacity change from 0 to 512 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x9, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2000000000000000}, 0x0) 19:04:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000700000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.519757][T32738] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 729.529881][T32738] EXT4-fs (loop5): group descriptors corrupted! [ 729.552218][T32753] loop3: detected capacity change from 0 to 512 19:04:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000090000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.583799][T32753] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 729.595387][T32753] EXT4-fs (loop3): get root inode failed [ 729.601038][T32753] EXT4-fs (loop3): mount failed 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xa, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 729.647160][ T300] loop4: detected capacity change from 0 to 512 [ 729.665202][ T301] loop5: detected capacity change from 0 to 512 [ 729.673466][ T300] EXT4-fs (loop4): Invalid log block size: 7 [ 729.681904][ T301] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 729.692027][ T301] EXT4-fs (loop5): group descriptors corrupted! [ 729.713704][T32753] loop3: detected capacity change from 0 to 512 [ 729.732597][T32753] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:52 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2500000000000000}, 0x0) 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xb, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003090000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000800000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.744121][T32753] EXT4-fs (loop3): get root inode failed [ 729.749775][T32753] EXT4-fs (loop3): mount failed 19:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000ae0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xc, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x2800000000000000}, 0x0) [ 729.804494][ T330] loop4: detected capacity change from 0 to 512 [ 729.820285][ T329] loop5: detected capacity change from 0 to 512 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xd, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000900000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.853450][ T330] EXT4-fs (loop4): Invalid log block size: 8 [ 729.862900][ T329] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 729.865445][ T341] loop3: detected capacity change from 0 to 512 [ 729.872995][ T329] EXT4-fs (loop5): group descriptors corrupted! 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4800000000000000}, 0x0) 19:04:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000a0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 729.952025][ T341] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 729.963685][ T341] EXT4-fs (loop3): get root inode failed [ 729.969346][ T341] EXT4-fs (loop3): mount failed [ 729.993418][ T364] loop4: detected capacity change from 0 to 512 [ 730.001517][ T365] loop5: detected capacity change from 0 to 512 [ 730.018750][ T364] EXT4-fs (loop4): Invalid log block size: 9 [ 730.025713][ T365] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 730.035825][ T365] EXT4-fs (loop5): group descriptors corrupted! 19:04:52 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xe, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 19:04:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000a00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 730.058170][ T341] loop3: detected capacity change from 0 to 512 [ 730.072337][ T341] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 730.083857][ T341] EXT4-fs (loop3): get root inode failed [ 730.089495][ T341] EXT4-fs (loop3): mount failed 19:04:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000030a0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000af0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 19:04:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xf, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 730.152531][ T391] loop4: detected capacity change from 0 to 512 [ 730.173000][ T391] EXT4-fs (loop4): Invalid log block size: 10 [ 730.189448][ T396] loop5: detected capacity change from 0 to 512 [ 730.195535][ T398] loop3: detected capacity change from 0 to 512 19:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6800000000000000}, 0x0) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x10, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 730.212820][ T396] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 730.223488][ T396] EXT4-fs (loop5): group descriptors corrupted! 19:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000b00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 730.273773][ T398] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 730.285302][ T398] EXT4-fs (loop3): get root inode failed [ 730.290975][ T398] EXT4-fs (loop3): mount failed 19:04:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000b0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 730.343273][ T424] loop4: detected capacity change from 0 to 512 [ 730.355612][ T398] loop3: detected capacity change from 0 to 512 [ 730.379691][ T398] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x11, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:53 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 730.391341][ T398] EXT4-fs (loop3): get root inode failed [ 730.397014][ T398] EXT4-fs (loop3): mount failed [ 730.400113][ T434] loop5: detected capacity change from 0 to 512 [ 730.408676][ T424] EXT4-fs (loop4): Invalid log block size: 11 [ 730.418673][ T434] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 730.428772][ T434] EXT4-fs (loop5): group descriptors corrupted! 19:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000c00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000fe0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7400000000000000}, 0x0) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1c, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000030b0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 730.505837][ T449] loop4: detected capacity change from 0 to 512 [ 730.524013][ T449] EXT4-fs (loop4): Invalid log block size: 12 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x8000000000000000}, 0x0) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x31, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 730.582422][ T463] loop5: detected capacity change from 0 to 512 [ 730.599590][ T463] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 730.609694][ T463] EXT4-fs (loop5): group descriptors corrupted! [ 730.611751][ T466] loop3: detected capacity change from 0 to 512 19:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000d00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x81ffffff00000000}, 0x0) [ 730.658520][ T466] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 730.670061][ T466] EXT4-fs (loop3): get root inode failed [ 730.675690][ T466] EXT4-fs (loop3): mount failed 19:04:53 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3d, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000c0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 730.734961][ T492] loop4: detected capacity change from 0 to 512 [ 730.771286][ T492] EXT4-fs (loop4): Invalid log block size: 13 [ 730.778706][ T466] loop3: detected capacity change from 0 to 512 [ 730.795843][ T509] loop5: detected capacity change from 0 to 512 [ 730.809641][ T466] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 730.821268][ T466] EXT4-fs (loop3): get root inode failed [ 730.826908][ T466] EXT4-fs (loop3): mount failed [ 730.853983][ T509] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 730.864082][ T509] EXT4-fs (loop5): group descriptors corrupted! 19:04:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000011000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000e00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000d0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 730.943713][ T531] loop3: detected capacity change from 0 to 512 [ 730.955782][ T533] loop4: detected capacity change from 0 to 512 [ 730.960848][ T535] loop5: detected capacity change from 0 to 512 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 19:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000f00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xeaffffff00000000}, 0x0) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x9}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 730.987915][ T535] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 730.998019][ T535] EXT4-fs (loop5): group descriptors corrupted! [ 731.003981][ T531] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 731.015817][ T531] EXT4-fs (loop3): get root inode failed [ 731.021459][ T531] EXT4-fs (loop3): mount failed [ 731.026771][ T533] EXT4-fs (loop4): Invalid log block size: 14 [ 731.079554][ T531] loop3: detected capacity change from 0 to 512 [ 731.097083][ T531] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 731.104898][ T562] loop4: detected capacity change from 0 to 512 [ 731.108606][ T531] EXT4-fs (loop3): get root inode failed [ 731.120464][ T531] EXT4-fs (loop3): mount failed 19:04:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000e0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 731.138209][ T562] EXT4-fs (loop4): Invalid log block size: 15 19:04:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000012000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 19:04:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 731.179269][ T570] loop5: detected capacity change from 0 to 512 [ 731.201541][ T570] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 731.211639][ T570] EXT4-fs (loop5): group descriptors corrupted! 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 731.288398][ T591] loop3: detected capacity change from 0 to 512 [ 731.295530][ T592] loop4: detected capacity change from 0 to 512 [ 731.320204][ T592] EXT4-fs (loop4): Invalid log block size: 16 [ 731.327082][ T591] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:54 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x10}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000f0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) [ 731.338569][ T591] EXT4-fs (loop3): get root inode failed [ 731.344190][ T591] EXT4-fs (loop3): mount failed [ 731.369357][ T607] loop5: detected capacity change from 0 to 512 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 19:04:54 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 731.384084][ T607] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 731.394198][ T607] EXT4-fs (loop5): group descriptors corrupted! [ 731.419225][ T591] loop3: detected capacity change from 0 to 512 [ 731.437491][ T591] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 731.449117][ T591] EXT4-fs (loop3): get root inode failed [ 731.454746][ T591] EXT4-fs (loop3): mount failed 19:04:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000003f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001100000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x48}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 19:04:54 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000100000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 731.548458][ T651] loop5: detected capacity change from 0 to 512 [ 731.554269][ T649] loop4: detected capacity change from 0 to 512 [ 731.555098][ T652] loop3: detected capacity change from 0 to 512 [ 731.570765][ T651] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 731.580867][ T651] EXT4-fs (loop5): group descriptors corrupted! 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x94}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000004100000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 731.594970][ T649] EXT4-fs (loop4): Invalid log block size: 17 [ 731.618186][ T652] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 731.629743][ T652] EXT4-fs (loop3): get root inode failed [ 731.635394][ T652] EXT4-fs (loop3): mount failed 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 731.685954][ T675] loop5: detected capacity change from 0 to 512 [ 731.694271][ T680] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.708244][ T652] loop3: detected capacity change from 0 to 512 [ 731.718250][ T675] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 731.728348][ T675] EXT4-fs (loop5): group descriptors corrupted! [ 731.741979][ T652] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 731.753542][ T652] EXT4-fs (loop3): get root inode failed [ 731.759227][ T652] EXT4-fs (loop3): mount failed 19:04:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000040000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x4, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 19:04:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000110000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 731.824480][ T705] validate_nla: 8 callbacks suppressed [ 731.824491][ T705] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 731.841672][ T709] loop4: detected capacity change from 0 to 512 [ 731.845219][ T710] loop3: detected capacity change from 0 to 512 [ 731.848422][ T711] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.856064][ T714] loop5: detected capacity change from 0 to 512 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 731.867028][ T709] EXT4-fs (loop4): Invalid log block size: 18 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 19:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001400000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 731.904737][ T714] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 731.914879][ T714] EXT4-fs (loop5): group descriptors corrupted! [ 731.922208][ T710] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 731.933777][ T710] EXT4-fs (loop3): get root inode failed [ 731.939463][ T710] EXT4-fs (loop3): mount failed 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x8, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 731.957048][ T729] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.989111][ T733] loop4: detected capacity change from 0 to 512 [ 731.995087][ T737] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.006539][ T733] EXT4-fs (loop4): Invalid log block size: 20 [ 732.014800][ T738] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 732.025035][ T710] loop3: detected capacity change from 0 to 512 [ 732.036599][ T710] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 732.048173][ T710] EXT4-fs (loop3): get root inode failed [ 732.053800][ T710] EXT4-fs (loop3): mount failed 19:04:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000007cd000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 19:04:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000120000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000002000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xb, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:54 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 732.174786][ T771] loop3: detected capacity change from 0 to 512 [ 732.203649][ T777] loop4: detected capacity change from 0 to 512 [ 732.207053][ T782] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 732.210291][ T771] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 732.230671][ T771] EXT4-fs (loop3): get root inode failed [ 732.236327][ T771] EXT4-fs (loop3): mount failed [ 732.243627][ T778] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 732.252678][ T781] loop5: detected capacity change from 0 to 512 [ 732.268602][ T777] EXT4-fs (loop4): Invalid log block size: 32 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xf, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 732.275693][ T781] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 732.285801][ T781] EXT4-fs (loop5): group descriptors corrupted! [ 732.305344][ T771] loop3: detected capacity change from 0 to 512 19:04:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000002e00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 732.324217][ T771] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 732.335713][ T771] EXT4-fs (loop3): get root inode failed [ 732.341367][ T771] EXT4-fs (loop3): mount failed [ 732.342992][ T789] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 19:04:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000fffe000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000180000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 732.390898][ T798] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 732.410610][ T806] loop4: detected capacity change from 0 to 512 [ 732.431578][ T815] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.443022][ T818] loop3: detected capacity change from 0 to 512 [ 732.456760][ T806] EXT4-fs (loop4): Invalid log block size: 46 [ 732.464282][ T819] loop5: detected capacity change from 0 to 512 [ 732.480352][ T818] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:55 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x25, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 732.491906][ T818] EXT4-fs (loop3): get root inode failed [ 732.497676][ T818] EXT4-fs (loop3): mount failed [ 732.508493][ T819] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 732.518662][ T819] EXT4-fs (loop5): group descriptors corrupted! 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 732.542344][ T830] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.543124][ T831] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 732.564845][ T818] loop3: detected capacity change from 0 to 512 19:04:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000190000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000003f00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 732.596965][ T818] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 732.608474][ T818] EXT4-fs (loop3): get root inode failed [ 732.612545][ T847] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.614097][ T818] EXT4-fs (loop3): mount failed [ 732.614409][ T831] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x28, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 732.674838][ T856] loop4: detected capacity change from 0 to 512 [ 732.680188][ T857] loop5: detected capacity change from 0 to 512 [ 732.706056][ T857] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 732.716339][ T857] EXT4-fs (loop5): group descriptors corrupted! 19:04:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000002000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 732.728858][ T856] EXT4-fs (loop4): Invalid log block size: 63 [ 732.746219][ T866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 732.765584][ T869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.770604][ T872] loop3: detected capacity change from 0 to 512 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xb}, 0x0) 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x30, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000006400000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:55 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000200000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 732.811393][ T872] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 732.822962][ T872] EXT4-fs (loop3): get root inode failed [ 732.828644][ T872] EXT4-fs (loop3): mount failed 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x2, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 732.895283][ T894] loop5: detected capacity change from 0 to 512 [ 732.905755][ T894] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 732.915881][ T894] EXT4-fs (loop5): group descriptors corrupted! [ 732.924933][ T898] loop4: detected capacity change from 0 to 512 [ 732.930117][ T872] loop3: detected capacity change from 0 to 512 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 732.941886][ T898] EXT4-fs (loop4): Invalid log block size: 100 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xd}, 0x0) 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x4, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 732.967248][ T872] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 732.978739][ T872] EXT4-fs (loop3): get root inode failed [ 732.984375][ T872] EXT4-fs (loop3): mount failed 19:04:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000010200000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000003000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000001fe00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x5, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 733.103453][ T933] loop5: detected capacity change from 0 to 512 [ 733.123135][ T940] loop3: detected capacity change from 0 to 512 [ 733.130092][ T939] loop4: detected capacity change from 0 to 512 [ 733.148676][ T933] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 733.158784][ T933] EXT4-fs (loop5): group descriptors corrupted! [ 733.171364][ T939] EXT4-fs (loop4): Invalid log block size: 254 19:04:55 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x6, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19:04:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000007fffffff00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 733.196369][ T940] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 733.208089][ T940] EXT4-fs (loop3): get root inode failed [ 733.213715][ T940] EXT4-fs (loop3): mount failed 19:04:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000220000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x7, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 733.273534][ T940] loop3: detected capacity change from 0 to 512 [ 733.277379][ T967] loop4: detected capacity change from 0 to 512 [ 733.292465][ T940] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 733.304027][ T940] EXT4-fs (loop3): get root inode failed [ 733.309692][ T940] EXT4-fs (loop3): mount failed 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x8, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 733.321822][ T967] EXT4-fs (loop4): Invalid log block size: 255 [ 733.338151][ T981] loop5: detected capacity change from 0 to 512 [ 733.365267][ T981] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 733.375401][ T981] EXT4-fs (loop5): group descriptors corrupted! 19:04:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000004000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x0) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x9, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000ffffffff00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000001220000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x25}, 0x0) 19:04:56 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xa, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 733.464288][ T1009] loop4: detected capacity change from 0 to 512 [ 733.487775][ T1009] EXT4-fs (loop4): Invalid log block size: 255 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x28}, 0x0) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xb, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffffffffffffff00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 733.542912][ T1026] loop5: detected capacity change from 0 to 512 [ 733.553075][ T1028] loop3: detected capacity change from 0 to 512 [ 733.572670][ T1026] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 733.582828][ T1026] EXT4-fs (loop5): group descriptors corrupted! 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x0) [ 733.616903][ T1028] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 733.628528][ T1028] EXT4-fs (loop3): get root inode failed [ 733.632132][ T1047] loop4: detected capacity change from 0 to 512 [ 733.634180][ T1028] EXT4-fs (loop3): mount failed [ 733.657930][ T1047] EXT4-fs (loop4): Invalid log block size: 255 [ 733.709561][ T1028] loop3: detected capacity change from 0 to 512 [ 733.732505][ T1028] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 733.744030][ T1028] EXT4-fs (loop3): get root inode failed [ 733.749685][ T1028] EXT4-fs (loop3): mount failed 19:04:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000005000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xc, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 19:04:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000250000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 733.843313][ T1081] loop4: detected capacity change from 0 to 512 [ 733.846257][ T1079] loop5: detected capacity change from 0 to 512 [ 733.849949][ T1083] loop3: detected capacity change from 0 to 512 [ 733.869916][ T1079] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 733.880048][ T1079] EXT4-fs (loop5): group descriptors corrupted! 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xd, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x68}, 0x0) [ 733.900957][ T1081] EXT4-fs mount: 83 callbacks suppressed [ 733.900968][ T1081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 733.937581][ T1083] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 733.949246][ T1083] EXT4-fs (loop3): get root inode failed [ 733.954865][ T1083] EXT4-fs (loop3): mount failed 19:04:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000002e0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000300000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xe, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 734.045056][ T1117] loop5: detected capacity change from 0 to 512 [ 734.063988][ T1117] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 734.074132][ T1117] EXT4-fs (loop5): group descriptors corrupted! [ 734.082224][ T1083] loop3: detected capacity change from 0 to 512 [ 734.088893][ T1124] loop4: detected capacity change from 0 to 512 19:04:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000006000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 19:04:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xf, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:56 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 734.103492][ T1083] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 734.115046][ T1083] EXT4-fs (loop3): get root inode failed [ 734.120688][ T1083] EXT4-fs (loop3): mount failed [ 734.127541][ T1124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000320000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 734.222208][ T1149] loop4: detected capacity change from 0 to 512 [ 734.224693][ T1151] loop3: detected capacity change from 0 to 512 [ 734.234609][ T1156] loop5: detected capacity change from 0 to 512 [ 734.260993][ T1156] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x10, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x7a}, 0x0) [ 734.271107][ T1156] EXT4-fs (loop5): group descriptors corrupted! [ 734.278426][ T1149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 734.289530][ T1151] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 734.301065][ T1151] EXT4-fs (loop3): get root inode failed [ 734.306751][ T1151] EXT4-fs (loop3): mount failed 19:04:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000500000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x11, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 734.397800][ T1151] loop3: detected capacity change from 0 to 512 [ 734.416662][ T1151] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 734.428231][ T1151] EXT4-fs (loop3): get root inode failed [ 734.433852][ T1151] EXT4-fs (loop3): mount failed 19:04:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000007000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 19:04:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000003f0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1c, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:57 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000600000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 734.455103][ T1195] loop4: detected capacity change from 0 to 512 [ 734.473268][ T1195] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 734.524274][ T1205] loop5: detected capacity change from 0 to 512 [ 734.552013][ T1205] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 734.562159][ T1205] EXT4-fs (loop5): group descriptors corrupted! 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x31, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 734.571251][ T1217] loop3: detected capacity change from 0 to 512 [ 734.579745][ T1218] loop4: detected capacity change from 0 to 512 [ 734.607900][ T1218] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 734.618889][ T1217] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 734.630395][ T1217] EXT4-fs (loop3): get root inode failed [ 734.636014][ T1217] EXT4-fs (loop3): mount failed 19:04:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000400000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3d, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000700000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 734.688420][ T1217] loop3: detected capacity change from 0 to 512 [ 734.717920][ T1217] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 734.719824][ T1250] loop5: detected capacity change from 0 to 512 19:04:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000008000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 734.729403][ T1217] EXT4-fs (loop3): get root inode failed [ 734.729414][ T1217] EXT4-fs (loop3): mount failed 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x30}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 734.784715][ T1250] EXT4-fs (loop5): bad geometry: first data block 64 is beyond end of filesystem (64) [ 734.806914][ T1261] loop4: detected capacity change from 0 to 512 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 19:04:57 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xa16}, 0x0) [ 734.829025][ T1261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 734.845274][ T1269] loop3: detected capacity change from 0 to 512 19:04:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000480000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x4, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 734.897918][ T1269] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 734.909478][ T1269] EXT4-fs (loop3): get root inode failed [ 734.915104][ T1269] EXT4-fs (loop3): mount failed 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xb00}, 0x0) [ 734.957364][ T1292] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 734.961550][ T1293] loop5: detected capacity change from 0 to 512 [ 734.986834][ T1269] loop3: detected capacity change from 0 to 512 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x8, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 735.002775][ T1269] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 735.003366][ T1305] loop4: detected capacity change from 0 to 512 [ 735.014288][ T1269] EXT4-fs (loop3): get root inode failed [ 735.026137][ T1269] EXT4-fs (loop3): mount failed [ 735.033906][ T1293] EXT4-fs (loop5): bad geometry: first data block 72 is beyond end of filesystem (64) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 19:04:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000009000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xd00}, 0x0) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xb, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 735.075037][ T1312] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 735.085767][ T1305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000004c0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 19:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xf, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 735.177456][ T1335] loop5: detected capacity change from 0 to 512 [ 735.184119][ T1331] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 735.188234][ T1336] loop3: detected capacity change from 0 to 512 [ 735.213624][ T1335] EXT4-fs (loop5): bad geometry: first data block 76 is beyond end of filesystem (64) [ 735.248807][ T1336] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 735.260397][ T1336] EXT4-fs (loop3): get root inode failed [ 735.266018][ T1336] EXT4-fs (loop3): mount failed 19:04:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000600000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) [ 735.289595][ T1353] loop4: detected capacity change from 0 to 512 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 735.336589][ T1353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x25, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 735.379537][ T1336] loop3: detected capacity change from 0 to 512 [ 735.382754][ T1367] loop5: detected capacity change from 0 to 512 [ 735.415114][ T1336] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 735.426713][ T1336] EXT4-fs (loop3): get root inode failed [ 735.432348][ T1336] EXT4-fs (loop3): mount failed [ 735.440166][ T1367] EXT4-fs (loop5): bad geometry: first data block 96 is beyond end of filesystem (64) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x1200}, 0x0) 19:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000a00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x28, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000a000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000680000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x160a}, 0x0) [ 735.548038][ T1400] loop3: detected capacity change from 0 to 512 [ 735.557395][ T1399] loop4: detected capacity change from 0 to 512 [ 735.581662][ T1404] loop5: detected capacity change from 0 to 512 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x30, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000b00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 735.592166][ T1400] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 735.603680][ T1400] EXT4-fs (loop3): get root inode failed [ 735.609323][ T1400] EXT4-fs (loop3): mount failed [ 735.611587][ T1399] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 735.628152][ T1404] EXT4-fs (loop5): bad geometry: first data block 104 is beyond end of filesystem (64) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x2, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000006c0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 735.723629][ T1400] loop3: detected capacity change from 0 to 512 [ 735.747608][ T1400] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 735.753066][ T1438] loop4: detected capacity change from 0 to 512 [ 735.759219][ T1400] EXT4-fs (loop3): get root inode failed [ 735.771053][ T1400] EXT4-fs (loop3): mount failed 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x2500}, 0x0) 19:04:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000b000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 735.807105][ T1441] loop5: detected capacity change from 0 to 512 [ 735.808601][ T1438] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:58 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x4, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 735.849293][ T1441] EXT4-fs (loop5): bad geometry: first data block 108 is beyond end of filesystem (64) [ 735.878095][ T1454] loop3: detected capacity change from 0 to 512 19:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 735.914968][ T1454] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 735.926582][ T1454] EXT4-fs (loop3): get root inode failed [ 735.932200][ T1454] EXT4-fs (loop3): mount failed 19:04:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000740000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x5, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) [ 736.013918][ T1478] loop4: detected capacity change from 0 to 512 [ 736.030436][ T1482] loop5: detected capacity change from 0 to 512 [ 736.042163][ T1482] EXT4-fs (loop5): bad geometry: first data block 116 is beyond end of filesystem (64) 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x6, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 736.076781][ T1454] loop3: detected capacity change from 0 to 512 [ 736.091021][ T1478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 736.110853][ T1454] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 19:04:58 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 736.122370][ T1454] EXT4-fs (loop3): get root inode failed [ 736.128025][ T1454] EXT4-fs (loop3): mount failed 19:04:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000c000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000d00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000007a0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x7, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6800}, 0x0) [ 736.233595][ T1526] loop5: detected capacity change from 0 to 512 [ 736.245877][ T1527] loop3: detected capacity change from 0 to 512 [ 736.256979][ T1532] loop4: detected capacity change from 0 to 512 [ 736.268298][ T1526] EXT4-fs (loop5): bad geometry: first data block 122 is beyond end of filesystem (64) 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x8, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) [ 736.287650][ T1527] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 736.299177][ T1527] EXT4-fs (loop3): get root inode failed [ 736.304799][ T1527] EXT4-fs (loop3): mount failed 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x9, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 736.335504][ T1532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffff850000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000e00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x7400}, 0x0) [ 736.377904][ T1527] loop3: detected capacity change from 0 to 512 [ 736.400696][ T1527] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 736.412268][ T1527] EXT4-fs (loop3): get root inode failed [ 736.417905][ T1527] EXT4-fs (loop3): mount failed 19:04:59 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000d000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xa, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 736.460167][ T1570] loop5: detected capacity change from 0 to 512 [ 736.490586][ T1570] EXT4-fs (loop5): bad geometry: first data block 133 is beyond end of filesystem (64) 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xb, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) [ 736.522789][ T1586] loop4: detected capacity change from 0 to 512 [ 736.541866][ T1592] loop3: detected capacity change from 0 to 512 [ 736.554874][ T1586] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000f00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffff8c0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xc, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 736.610290][ T1592] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 736.621809][ T1592] EXT4-fs (loop3): get root inode failed [ 736.627442][ T1592] EXT4-fs (loop3): mount failed [ 736.673978][ T1613] loop5: detected capacity change from 0 to 512 [ 736.689665][ T1592] loop3: detected capacity change from 0 to 512 [ 736.702553][ T1613] EXT4-fs (loop5): bad geometry: first data block 140 is beyond end of filesystem (64) 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xd, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 736.714103][ T1592] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 736.714227][ T1629] loop4: detected capacity change from 0 to 512 [ 736.725644][ T1592] EXT4-fs (loop3): get root inode failed [ 736.737476][ T1592] EXT4-fs (loop3): mount failed [ 736.746697][ T1632] __nla_validate_parse: 46 callbacks suppressed [ 736.746707][ T1632] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 736.757900][ T1629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:04:59 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000edc00000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000e000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xe, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 736.839563][ T1651] loop5: detected capacity change from 0 to 512 [ 736.850094][ T1651] EXT4-fs (loop5): bad geometry: first data block 192 is beyond end of filesystem (64) 19:04:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 736.881246][ T1656] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xf, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 736.932935][ T1666] loop3: detected capacity change from 0 to 512 [ 736.936603][ T1667] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:04:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000ce0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 736.977526][ T1679] loop4: detected capacity change from 0 to 512 [ 737.003795][ T1666] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 737.015362][ T1666] EXT4-fs (loop3): get root inode failed [ 737.016330][ T1689] loop5: detected capacity change from 0 to 512 19:04:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 737.021039][ T1666] EXT4-fs (loop3): mount failed 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x10, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 737.053071][ T1679] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.070610][ T1689] EXT4-fs (loop5): bad geometry: first data block 206 is beyond end of filesystem (64) 19:04:59 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:04:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001100000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 737.094773][ T1703] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.121203][ T1666] loop3: detected capacity change from 0 to 512 19:04:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x11, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 737.162228][ T1666] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 737.173772][ T1666] EXT4-fs (loop3): get root inode failed [ 737.179420][ T1666] EXT4-fs (loop3): mount failed [ 737.185747][ T1724] loop4: detected capacity change from 0 to 512 [ 737.205775][ T1724] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000010000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 19:05:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003ce0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1c, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 737.292504][ T1741] loop5: detected capacity change from 0 to 512 [ 737.305354][ T1740] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.315513][ T1741] EXT4-fs (loop5): bad geometry: first data block 206 is beyond end of filesystem (64) [ 737.326245][ T1756] loop4: detected capacity change from 0 to 512 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x31, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:00 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000cf0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 737.369538][ T1756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.400613][ T1767] loop3: detected capacity change from 0 to 512 19:05:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001700000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 737.430288][ T1790] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.435924][ T1767] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 737.451067][ T1767] EXT4-fs (loop3): get root inode failed [ 737.456705][ T1767] EXT4-fs (loop3): mount failed 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3d, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 737.483236][ T1800] loop5: detected capacity change from 0 to 512 [ 737.506979][ T1767] loop3: detected capacity change from 0 to 512 [ 737.523465][ T1800] EXT4-fs (loop5): bad geometry: first data block 207 is beyond end of filesystem (64) [ 737.525616][ T1811] loop4: detected capacity change from 0 to 512 [ 737.541106][ T1767] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 737.552663][ T1767] EXT4-fs (loop3): get root inode failed [ 737.558309][ T1767] EXT4-fs (loop3): mount failed [ 737.568730][ T1811] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.587906][ T1818] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000011000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 19:05:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000d00000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 737.693328][ T1840] loop3: detected capacity change from 0 to 512 [ 737.701194][ T1841] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.713587][ T1842] loop4: detected capacity change from 0 to 512 [ 737.725569][ T1844] loop5: detected capacity change from 0 to 512 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x6}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 737.741474][ T1840] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 737.753041][ T1840] EXT4-fs (loop3): get root inode failed [ 737.757664][ T1844] EXT4-fs (loop5): bad geometry: first data block 208 is beyond end of filesystem (64) [ 737.758670][ T1840] EXT4-fs (loop3): mount failed 19:05:00 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000d10000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 737.793814][ T1842] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.823893][ T1840] loop3: detected capacity change from 0 to 512 [ 737.834091][ T1861] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x8}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 737.876733][ T1840] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 737.888267][ T1840] EXT4-fs (loop3): get root inode failed [ 737.893888][ T1840] EXT4-fs (loop3): mount failed [ 737.908314][ T1874] loop5: detected capacity change from 0 to 512 [ 737.942750][ T1874] EXT4-fs (loop5): bad geometry: first data block 209 is beyond end of filesystem (64) [ 737.952171][ T1882] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000000012000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x9}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000d20000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 737.993497][ T1889] loop4: detected capacity change from 0 to 512 [ 738.031726][ T1894] loop5: detected capacity change from 0 to 512 [ 738.045598][ T1894] EXT4-fs (loop5): bad geometry: first data block 210 is beyond end of filesystem (64) [ 738.056598][ T1899] loop3: detected capacity change from 0 to 512 [ 738.067359][ T1889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:00 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 738.086068][ T1899] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 738.097585][ T1899] EXT4-fs (loop3): get root inode failed [ 738.103210][ T1899] EXT4-fs (loop3): mount failed 19:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 738.137913][ T1899] loop3: detected capacity change from 0 to 512 [ 738.157002][ T1899] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 738.168512][ T1899] EXT4-fs (loop3): get root inode failed [ 738.174133][ T1899] EXT4-fs (loop3): mount failed 19:05:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000018d30000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xa160000}, 0x0) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xb}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 738.207741][ T1927] loop4: detected capacity change from 0 to 512 [ 738.243412][ T1935] loop5: detected capacity change from 0 to 512 19:05:01 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000000fe000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 738.297876][ T1927] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 738.317729][ T1935] EXT4-fs (loop5): bad geometry: first data block 211 is beyond end of filesystem (64) 19:05:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002500000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xc}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x10}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffffda0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 738.461136][ T1969] loop4: detected capacity change from 0 to 512 [ 738.465842][ T1967] loop3: detected capacity change from 0 to 512 [ 738.499869][ T1967] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xd000000}, 0x0) 19:05:01 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}, {{0x0, 0x2710}, 0x0, 0x1, 0xffff}], 0x78) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 738.511490][ T1967] EXT4-fs (loop3): get root inode failed [ 738.517139][ T1967] EXT4-fs (loop3): mount failed [ 738.526155][ T1969] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 738.539439][ T1980] loop5: detected capacity change from 0 to 512 19:05:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002e00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 738.557896][ T1980] EXT4-fs (loop5): bad geometry: first data block 218 is beyond end of filesystem (64) [ 738.640120][ T1967] loop3: detected capacity change from 0 to 512 [ 738.659847][ T1967] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 738.664566][ T2009] loop4: detected capacity change from 0 to 512 [ 738.671356][ T1967] EXT4-fs (loop3): get root inode failed [ 738.683197][ T1967] EXT4-fs (loop3): mount failed [ 738.700774][ T2009] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffffe20000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x14}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 19:05:01 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f003600000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000000cd070000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 738.801106][ T2026] loop3: detected capacity change from 0 to 512 [ 738.821834][ T2029] loop4: detected capacity change from 0 to 512 [ 738.830189][ T2026] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 738.841428][ T2035] loop5: detected capacity change from 0 to 512 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) [ 738.841707][ T2026] EXT4-fs (loop3): get root inode failed [ 738.853513][ T2026] EXT4-fs (loop3): mount failed [ 738.871703][ T2035] EXT4-fs (loop5): bad geometry: first data block 226 is beyond end of filesystem (64) [ 738.882585][ T2029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x18}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 738.897020][ T2026] loop3: detected capacity change from 0 to 512 19:05:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 738.926900][ T2026] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 738.938409][ T2026] EXT4-fs (loop3): get root inode failed [ 738.944092][ T2026] EXT4-fs (loop3): mount failed 19:05:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffff00000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x34}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0x3}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 19:05:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000000feff0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.019525][ T2062] loop5: detected capacity change from 0 to 512 [ 739.036893][ T2062] EXT4-fs (loop5): bad geometry: first data block 240 is beyond end of filesystem (64) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x25000000}, 0x0) [ 739.095538][ T2076] loop4: detected capacity change from 0 to 512 [ 739.126215][ T2086] loop3: detected capacity change from 0 to 512 [ 739.135012][ T2076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:01 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0xf}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x28000000}, 0x0) 19:05:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000f40000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.162598][ T2086] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 739.174105][ T2086] EXT4-fs (loop3): get root inode failed [ 739.179754][ T2086] EXT4-fs (loop3): mount failed [ 739.221848][ T2086] loop3: detected capacity change from 0 to 512 [ 739.245059][ T2086] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 739.250123][ T2115] loop5: detected capacity change from 0 to 512 [ 739.256580][ T2086] EXT4-fs (loop3): get root inode failed 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 739.268581][ T2086] EXT4-fs (loop3): mount failed [ 739.275998][ T2115] EXT4-fs (loop5): bad geometry: first data block 244 is beyond end of filesystem (64) 19:05:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000000feffffff000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000f50000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.338502][ T2129] loop4: detected capacity change from 0 to 512 [ 739.354538][ T2129] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x6}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) [ 739.400473][ T2140] loop3: detected capacity change from 0 to 512 [ 739.401366][ T2143] loop5: detected capacity change from 0 to 512 [ 739.416817][ T2143] EXT4-fs (loop5): bad geometry: first data block 245 is beyond end of filesystem (64) [ 739.439181][ T2140] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.450686][ T2140] EXT4-fs (loop3): get root inode failed [ 739.456382][ T2140] EXT4-fs (loop3): mount failed 19:05:02 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000000feffffffffffffff0200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x8}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffff50000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.520107][ T2162] loop4: detected capacity change from 0 to 512 [ 739.533835][ T2162] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x9}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 739.581185][ T2175] loop5: detected capacity change from 0 to 512 [ 739.594916][ T2175] EXT4-fs (loop5): bad geometry: first data block 245 is beyond end of filesystem (64) [ 739.620187][ T2185] loop3: detected capacity change from 0 to 512 19:05:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000f60000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.642064][ T2185] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (64) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) [ 739.688366][ T2199] loop4: detected capacity change from 0 to 512 [ 739.709707][ T2206] loop5: detected capacity change from 0 to 512 [ 739.722169][ T2199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 739.734411][ T2206] EXT4-fs (loop5): bad geometry: first data block 246 is beyond end of filesystem (64) [ 739.752403][ T2185] loop3: detected capacity change from 0 to 512 19:05:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.785950][ T2185] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (64) 19:05:02 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}, {{}, 0x0, 0x8647, 0x10001}], 0x60) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xb}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffff60000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000400000000300000030000000ffffffffffffffff0200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 739.849004][ T2228] loop4: detected capacity change from 0 to 512 [ 739.883279][ T2228] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f007400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) [ 739.928778][ T2248] loop5: detected capacity change from 0 to 512 [ 739.939401][ T2244] loop3: detected capacity change from 0 to 512 [ 739.947109][ T2248] EXT4-fs (loop5): bad geometry: first data block 246 is beyond end of filesystem (64) 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xc}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x81ffffff}, 0x0) [ 739.972041][ T2244] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (64) [ 740.016696][ T2256] loop4: detected capacity change from 0 to 512 [ 740.039689][ T2244] loop3: detected capacity change from 0 to 512 [ 740.046999][ T2256] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x10}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000f70000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 740.060427][ T2244] EXT4-fs (loop3): bad geometry: first data block 4294967295 is beyond end of filesystem (64) 19:05:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000010000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f007a00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 19:05:02 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}, {{}, 0x4, 0x8, 0x9}], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 740.124272][ T2281] loop5: detected capacity change from 0 to 512 [ 740.144630][ T2281] EXT4-fs (loop5): bad geometry: first data block 247 is beyond end of filesystem (64) 19:05:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000f80000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 740.222482][ T2300] loop4: detected capacity change from 0 to 512 [ 740.224026][ T2292] loop3: detected capacity change from 0 to 512 [ 740.257292][ T2300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xeaffffff}, 0x0) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x14}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 740.283179][ T2292] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) [ 740.310791][ T2312] loop5: detected capacity change from 0 to 512 19:05:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f009a00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x18}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x34}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 740.366124][ T2312] EXT4-fs (loop5): bad geometry: first data block 248 is beyond end of filesystem (64) [ 740.382368][ T2292] loop3: detected capacity change from 0 to 512 [ 740.401913][ T2292] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) 19:05:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000020000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 19:05:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000001f80000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 740.468789][ T2341] loop4: detected capacity change from 0 to 512 19:05:03 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}, {{}, 0x15, 0x1c3, 0x4}], 0x30) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0x3}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) [ 740.513739][ T2350] loop3: detected capacity change from 0 to 512 [ 740.539933][ T2341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 740.553010][ T2350] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) [ 740.560969][ T2355] loop5: detected capacity change from 0 to 512 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0xf}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f009b00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xffffff81}, 0x0) [ 740.618063][ T2350] loop3: detected capacity change from 0 to 512 [ 740.631000][ T2350] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) [ 740.639525][ T2355] EXT4-fs (loop5): bad geometry: first data block 248 is beyond end of filesystem (64) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x5}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000040000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000f90000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 740.735305][ T2389] loop4: detected capacity change from 0 to 512 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x6}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 740.780758][ T2401] loop5: detected capacity change from 0 to 512 [ 740.787355][ T2398] loop3: detected capacity change from 0 to 512 [ 740.815965][ T2401] EXT4-fs (loop5): bad geometry: first data block 249 is beyond end of filesystem (64) 19:05:03 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x3, 0x20}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xffffffea}, 0x0) [ 740.825330][ T2389] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 740.836221][ T2398] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x8}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 19:05:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f009c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffdf90000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x9}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 740.917879][ T2398] loop3: detected capacity change from 0 to 512 [ 740.928525][ T2398] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024) [ 740.952490][ T2431] loop4: detected capacity change from 0 to 512 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 740.967077][ T2441] loop5: detected capacity change from 0 to 512 19:05:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000100000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) [ 740.992134][ T2431] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 741.011937][ T2441] EXT4-fs (loop5): bad geometry: first data block 249 is beyond end of filesystem (64) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xa}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000fa0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 741.097792][ T2466] loop3: detected capacity change from 0 to 512 [ 741.113102][ T2466] EXT4-fs (loop3): fragment/cluster size (4096) != block size (2048) 19:05:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2) 19:05:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f009d00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xb}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:03 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f020000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 741.145141][ T2478] loop5: detected capacity change from 0 to 512 [ 741.152911][ T2478] EXT4-fs (loop5): bad geometry: first data block 250 is beyond end of filesystem (64) [ 741.164063][ T2466] loop3: detected capacity change from 0 to 512 [ 741.170949][ T2466] EXT4-fs (loop3): fragment/cluster size (4096) != block size (2048) 19:05:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffffb0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x3) [ 741.217430][ T2493] loop4: detected capacity change from 0 to 512 [ 741.251879][ T2493] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0xc}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f009e00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 741.281025][ T2503] loop3: detected capacity change from 0 to 512 [ 741.301047][ T2508] loop5: detected capacity change from 0 to 512 [ 741.316279][ T2508] EXT4-fs (loop5): bad geometry: first data block 251 is beyond end of filesystem (64) 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x10}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 741.353286][ T2503] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 741.364816][ T2503] EXT4-fs (loop3): get root inode failed [ 741.370479][ T2503] EXT4-fs (loop3): mount failed 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x5) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x11}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003fc0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 741.418138][ T2532] loop4: detected capacity change from 0 to 512 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6) [ 741.478528][ T2503] loop3: detected capacity change from 0 to 512 [ 741.485978][ T2532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 741.491198][ T2551] loop5: detected capacity change from 0 to 512 [ 741.510376][ T2551] EXT4-fs (loop5): bad geometry: first data block 252 is beyond end of filesystem (64) 19:05:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 741.544650][ T2503] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 741.556255][ T2503] EXT4-fs (loop3): get root inode failed [ 741.561875][ T2503] EXT4-fs (loop3): mount failed 19:05:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f030000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x14}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7) 19:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00fe00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffdfd0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x8) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x18}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 741.660436][ T2578] loop3: detected capacity change from 0 to 512 [ 741.685257][ T2582] loop5: detected capacity change from 0 to 512 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x9) 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa) [ 741.700885][ T2578] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 741.712451][ T2578] EXT4-fs (loop3): get root inode failed [ 741.718114][ T2578] EXT4-fs (loop3): mount failed [ 741.724061][ T2582] EXT4-fs (loop5): bad geometry: first data block 253 is beyond end of filesystem (64) [ 741.726321][ T2586] loop4: detected capacity change from 0 to 512 19:05:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffffe0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 741.792954][ T2598] __nla_validate_parse: 43 callbacks suppressed [ 741.793007][ T2598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 741.811263][ T2586] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 741.826940][ T2578] loop3: detected capacity change from 0 to 512 [ 741.843601][ T2611] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 741.845692][ T2606] loop5: detected capacity change from 0 to 512 [ 741.861394][ T2606] EXT4-fs (loop5): bad geometry: first data block 254 is beyond end of filesystem (64) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x34}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 741.890156][ T2578] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 741.901694][ T2578] EXT4-fs (loop3): get root inode failed [ 741.907333][ T2578] EXT4-fs (loop3): mount failed [ 741.971982][ T2626] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:05:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f040000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xb) 19:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f009401000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000fff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0x3}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x0, 0x3, 0x20}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 742.053555][ T2635] loop4: detected capacity change from 0 to 512 [ 742.063615][ T2639] loop5: detected capacity change from 0 to 512 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4, 0xf}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 742.098280][ T2635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 742.109276][ T2639] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 742.134351][ T2653] loop3: detected capacity change from 0 to 512 19:05:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00f801000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffffefff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 742.153945][ T2659] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.157272][ T2653] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 742.174754][ T2653] EXT4-fs (loop3): get root inode failed [ 742.180516][ T2653] EXT4-fs (loop3): mount failed 19:05:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xd) [ 742.247886][ T2669] loop5: detected capacity change from 0 to 512 [ 742.264435][ T2653] loop3: detected capacity change from 0 to 512 [ 742.289983][ T2669] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 742.298746][ T2681] loop4: detected capacity change from 0 to 512 [ 742.317548][ T2653] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 742.329053][ T2653] EXT4-fs (loop3): get root inode failed [ 742.334706][ T2653] EXT4-fs (loop3): mount failed 19:05:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f050000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xe) 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x6}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffffbff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x0, 0x0, 0x20}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000402000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 742.353711][ T2681] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 742.439816][ T2706] loop3: detected capacity change from 0 to 512 [ 742.468999][ T2715] loop5: detected capacity change from 0 to 512 [ 742.470640][ T2718] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x9}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 742.479731][ T2720] loop4: detected capacity change from 0 to 512 [ 742.495959][ T2706] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 742.507465][ T2706] EXT4-fs (loop3): get root inode failed [ 742.513100][ T2706] EXT4-fs (loop3): mount failed [ 742.520677][ T2715] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x10) [ 742.545341][ T2720] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 742.576124][ T2734] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003ffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 742.598590][ T2706] loop3: detected capacity change from 0 to 512 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x11) 19:05:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f060000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000003000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0xb}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 742.645386][ T2751] loop5: detected capacity change from 0 to 512 [ 742.652187][ T2706] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 742.663789][ T2706] EXT4-fs (loop3): get root inode failed [ 742.669441][ T2706] EXT4-fs (loop3): mount failed [ 742.680862][ T2751] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x12) [ 742.746543][ T2769] loop3: detected capacity change from 0 to 512 [ 742.766748][ T2773] loop4: detected capacity change from 0 to 512 [ 742.771503][ T2774] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.805443][ T2769] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 742.810363][ T2773] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 742.816961][ T2769] EXT4-fs (loop3): get root inode failed [ 742.833073][ T2769] EXT4-fs (loop3): mount failed 19:05:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001fffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0xc}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x25) 19:05:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00c503000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 742.869031][ T2769] loop3: detected capacity change from 0 to 512 [ 742.878372][ T2769] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 742.889919][ T2769] EXT4-fs (loop3): get root inode failed [ 742.895542][ T2769] EXT4-fs (loop3): mount failed 19:05:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00e0ffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x28) [ 742.927781][ T2798] loop5: detected capacity change from 0 to 512 [ 742.939214][ T2798] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x10}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f070000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 742.993508][ T2809] loop4: detected capacity change from 0 to 512 [ 743.016060][ T2817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.026098][ T2809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x11}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 743.054084][ T2824] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.070327][ T2819] loop5: detected capacity change from 0 to 512 19:05:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00c603000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x48) [ 743.100680][ T2827] loop3: detected capacity change from 0 to 512 [ 743.110414][ T2830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.126808][ T2819] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 743.143659][ T2827] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 743.155150][ T2827] EXT4-fs (loop3): get root inode failed [ 743.160795][ T2827] EXT4-fs (loop3): mount failed [ 743.193858][ T2844] loop4: detected capacity change from 0 to 512 [ 743.204615][ T2844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 743.224116][ T2827] loop3: detected capacity change from 0 to 512 19:05:06 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x14}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4c) 19:05:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00c703000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fffefffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 743.252582][ T2827] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 743.264134][ T2827] EXT4-fs (loop3): get root inode failed [ 743.269821][ T2827] EXT4-fs (loop3): mount failed 19:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f080000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x60) [ 743.326723][ T2872] loop4: detected capacity change from 0 to 512 [ 743.336615][ T2865] loop5: detected capacity change from 0 to 512 [ 743.354765][ T2872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x18}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x68) [ 743.405299][ T2865] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 743.416867][ T2883] loop3: detected capacity change from 0 to 512 19:05:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00c803000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 743.467645][ T2883] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 743.479191][ T2883] EXT4-fs (loop3): get root inode failed [ 743.484819][ T2883] EXT4-fs (loop3): mount failed 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6c) 19:05:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffffbffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x34}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x74) [ 743.538423][ T2883] loop3: detected capacity change from 0 to 512 [ 743.578347][ T2883] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 743.579282][ T2916] loop5: detected capacity change from 0 to 512 [ 743.589874][ T2883] EXT4-fs (loop3): get root inode failed [ 743.599835][ T2911] loop4: detected capacity change from 0 to 512 [ 743.601707][ T2883] EXT4-fs (loop3): mount failed [ 743.613683][ T2916] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f090000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff9fdffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7a) [ 743.651688][ T2911] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x2}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 743.715937][ T2932] loop3: detected capacity change from 0 to 512 [ 743.740192][ T2932] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 743.751752][ T2932] EXT4-fs (loop3): get root inode failed [ 743.757429][ T2932] EXT4-fs (loop3): mount failed 19:05:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00c903000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x300) [ 743.763219][ T2939] loop5: detected capacity change from 0 to 512 19:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0a0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 743.804820][ T2939] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 743.823678][ T2951] loop4: detected capacity change from 0 to 512 [ 743.852052][ T2959] loop3: detected capacity change from 0 to 512 [ 743.864129][ T2951] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 743.889825][ T2959] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:06 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x500) 19:05:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffdfdffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 743.901373][ T2959] EXT4-fs (loop3): get root inode failed [ 743.907018][ T2959] EXT4-fs (loop3): mount failed 19:05:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00e803000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 743.943663][ T2959] loop3: detected capacity change from 0 to 512 [ 743.971117][ T2959] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 743.982634][ T2959] EXT4-fs (loop3): get root inode failed [ 743.988267][ T2959] EXT4-fs (loop3): mount failed 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x6}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x600) [ 744.001066][ T2985] loop5: detected capacity change from 0 to 512 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x700) 19:05:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0b0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 744.062887][ T2985] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 744.081739][ T2997] loop4: detected capacity change from 0 to 512 [ 744.099331][ T2997] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f7fffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:06 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00fd03000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 744.154355][ T3014] loop3: detected capacity change from 0 to 512 19:05:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x9}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x900) [ 744.205569][ T3014] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 744.217206][ T3014] EXT4-fs (loop3): get root inode failed [ 744.217619][ T3022] loop5: detected capacity change from 0 to 512 [ 744.222901][ T3014] EXT4-fs (loop3): mount failed [ 744.260004][ T3022] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 744.271501][ T3014] loop3: detected capacity change from 0 to 512 [ 744.285462][ T3038] loop4: detected capacity change from 0 to 512 [ 744.296282][ T3014] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa00) 19:05:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0c0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 744.307808][ T3014] EXT4-fs (loop3): get root inode failed [ 744.313435][ T3014] EXT4-fs (loop3): mount failed [ 744.337114][ T3038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0xb}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f85ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00fe03000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa16) [ 744.424706][ T3060] loop3: detected capacity change from 0 to 512 [ 744.447271][ T3067] loop5: detected capacity change from 0 to 512 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x10}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 744.463957][ T3060] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 744.475460][ T3060] EXT4-fs (loop3): get root inode failed [ 744.481109][ T3060] EXT4-fs (loop3): mount failed [ 744.488898][ T3067] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xb00) 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc00) [ 744.540833][ T3080] loop4: detected capacity change from 0 to 512 [ 744.565801][ T3080] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 744.578225][ T3060] loop3: detected capacity change from 0 to 512 19:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f8cffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 744.600078][ T3060] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 744.611573][ T3060] EXT4-fs (loop3): get root inode failed [ 744.617219][ T3060] EXT4-fs (loop3): mount failed 19:05:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000204000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0d0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x116}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xd00) [ 744.648012][ T3107] loop5: detected capacity change from 0 to 512 [ 744.673284][ T3107] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x12d}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xe00) 19:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fdaffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 744.731585][ T3121] loop3: detected capacity change from 0 to 512 [ 744.754353][ T3127] loop4: detected capacity change from 0 to 512 [ 744.786879][ T3121] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 744.790103][ T3135] loop5: detected capacity change from 0 to 512 [ 744.798378][ T3121] EXT4-fs (loop3): get root inode failed [ 744.810274][ T3121] EXT4-fs (loop3): mount failed 19:05:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4, 0x3000}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xec0) 19:05:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000604000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 744.831982][ T3135] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 744.836160][ T3127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 744.876706][ T3121] loop3: detected capacity change from 0 to 512 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x1100) 19:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fe2ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 744.914641][ T3121] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 744.926157][ T3121] EXT4-fs (loop3): get root inode failed [ 744.931780][ T3121] EXT4-fs (loop3): mount failed [ 744.993298][ T3166] loop5: detected capacity change from 0 to 512 [ 745.012200][ T3168] loop4: detected capacity change from 0 to 512 [ 745.025868][ T3166] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0e0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x1200) 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x4, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001004000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 745.046273][ T3168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x160a) 19:05:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff0ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 745.104465][ T3182] validate_nla: 1 callbacks suppressed [ 745.104478][ T3182] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 745.143481][ T3189] loop4: detected capacity change from 0 to 512 19:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x8, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2000) [ 745.167687][ T3189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.207213][ T3205] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:05:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000005000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2500) [ 745.228904][ T3206] loop3: detected capacity change from 0 to 512 [ 745.236024][ T3210] loop5: detected capacity change from 0 to 512 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xb, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 745.269417][ T3210] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 745.307414][ T3224] loop4: detected capacity change from 0 to 512 [ 745.308409][ T3206] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 745.325229][ T3206] EXT4-fs (loop3): get root inode failed [ 745.330864][ T3206] EXT4-fs (loop3): mount failed [ 745.338818][ T3224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.418948][ T3206] loop3: detected capacity change from 0 to 512 [ 745.433629][ T3206] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 745.445202][ T3206] EXT4-fs (loop3): get root inode failed [ 745.450840][ T3206] EXT4-fs (loop3): mount failed 19:05:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0f0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2800) 19:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000006000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff5ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0xf, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:08 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4800) [ 745.532057][ T3256] loop5: detected capacity change from 0 to 512 [ 745.533514][ T3255] loop4: detected capacity change from 0 to 512 [ 745.547211][ T3258] loop3: detected capacity change from 0 to 512 [ 745.558973][ T3256] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x25, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4c00) 19:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff6ffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000406000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x28, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 745.579784][ T3258] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 745.591289][ T3258] EXT4-fs (loop3): get root inode failed [ 745.596941][ T3258] EXT4-fs (loop3): mount failed [ 745.603388][ T3255] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.678586][ T3282] loop5: detected capacity change from 0 to 512 [ 745.698474][ T3258] loop3: detected capacity change from 0 to 512 [ 745.703899][ T3282] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 745.706740][ T3287] loop4: detected capacity change from 0 to 512 [ 745.737042][ T3287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.746739][ T3258] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 745.759006][ T3258] EXT4-fs (loop3): get root inode failed [ 745.764681][ T3258] EXT4-fs (loop3): mount failed 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x30, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f100000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6000) 19:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000007000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffbffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6800) [ 745.856521][ T3319] loop4: detected capacity change from 0 to 512 [ 745.863407][ T3322] loop3: detected capacity change from 0 to 512 [ 745.863836][ T3320] loop5: detected capacity change from 0 to 512 [ 745.883564][ T3322] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 745.895135][ T3322] EXT4-fs (loop3): get root inode failed [ 745.900906][ T3322] EXT4-fs (loop3): mount failed 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x2, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6c00) 19:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000009000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 745.916285][ T3319] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 745.953948][ T3320] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7400) 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 745.992584][ T3322] loop3: detected capacity change from 0 to 512 [ 746.000910][ T3322] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.012460][ T3322] EXT4-fs (loop3): get root inode failed [ 746.018106][ T3322] EXT4-fs (loop3): mount failed 19:05:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffeffffff0000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f110000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x4, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7a00) [ 746.077916][ T3361] loop4: detected capacity change from 0 to 512 [ 746.096445][ T3361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 746.115590][ T3365] loop5: detected capacity change from 0 to 512 19:05:08 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) 19:05:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000a000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc00e) [ 746.134609][ T3365] EXT4-fs (loop5): bad geometry: first data block 255 is beyond end of filesystem (64) [ 746.153836][ T3376] loop3: detected capacity change from 0 to 512 19:05:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x5, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 746.188607][ T3376] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.200131][ T3376] EXT4-fs (loop3): get root inode failed [ 746.205750][ T3376] EXT4-fs (loop3): mount failed 19:05:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000300000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x6, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x34000) [ 746.249246][ T3390] loop4: detected capacity change from 0 to 512 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x400300) [ 746.294245][ T3403] loop5: detected capacity change from 0 to 512 [ 746.301344][ T3390] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 746.313745][ T3376] loop3: detected capacity change from 0 to 512 [ 746.326398][ T3376] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.337895][ T3376] EXT4-fs (loop3): get root inode failed 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x7, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f120000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000b000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 746.343611][ T3376] EXT4-fs (loop3): mount failed [ 746.350155][ T3403] EXT4-fs (loop5): bad block size 8192 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x1000000) [ 746.419923][ T3427] loop4: detected capacity change from 0 to 512 [ 746.428232][ T3432] loop3: detected capacity change from 0 to 512 [ 746.437885][ T3427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:09 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x8, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000400000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000c000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2000000) [ 746.467303][ T3432] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.478879][ T3432] EXT4-fs (loop3): get root inode failed [ 746.484503][ T3432] EXT4-fs (loop3): mount failed [ 746.501047][ T3445] loop5: detected capacity change from 0 to 512 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x3000000) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x9, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 746.516421][ T3445] EXT4-fs (loop5): bad block size 16384 [ 746.522502][ T3454] loop4: detected capacity change from 0 to 512 [ 746.543699][ T3454] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 746.556600][ T3432] loop3: detected capacity change from 0 to 512 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4000000) 19:05:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000d000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 746.589724][ T3432] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.601253][ T3432] EXT4-fs (loop3): get root inode failed [ 746.606899][ T3432] EXT4-fs (loop3): mount failed 19:05:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f220000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x5000000) 19:05:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000500000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xa, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:09 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) write$evdev(r0, &(0x7f0000000100)=[{}], 0x18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) [ 746.718914][ T3484] loop4: detected capacity change from 0 to 512 [ 746.726493][ T3492] loop3: detected capacity change from 0 to 512 [ 746.732095][ T3494] loop5: detected capacity change from 0 to 512 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xb, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6000000) [ 746.762902][ T3494] EXT4-fs (loop5): bad block size 32768 [ 746.769563][ T3484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 746.788000][ T3492] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.799524][ T3492] EXT4-fs (loop3): get root inode failed [ 746.805143][ T3492] EXT4-fs (loop3): mount failed 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7000000) 19:05:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000600000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xc, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 746.828206][ T3508] __nla_validate_parse: 48 callbacks suppressed [ 746.828218][ T3508] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 746.861684][ T3515] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000e000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 746.879647][ T3492] loop3: detected capacity change from 0 to 512 [ 746.901845][ T3522] loop5: detected capacity change from 0 to 512 [ 746.910990][ T3492] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 746.922483][ T3492] EXT4-fs (loop3): get root inode failed 19:05:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000003000007a0f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f250000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x8000000) 19:05:09 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 746.928111][ T3492] EXT4-fs (loop3): mount failed [ 746.937479][ T3522] EXT4-fs (loop5): bad block size 65536 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xd, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000700000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 746.986991][ T3538] loop4: detected capacity change from 0 to 512 [ 747.014110][ T3544] loop3: detected capacity change from 0 to 512 [ 747.014610][ T3538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xe, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 747.020806][ T3545] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.052601][ T3552] loop5: detected capacity change from 0 to 512 19:05:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000f000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0xf, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 747.093217][ T3544] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 747.104769][ T3544] EXT4-fs (loop3): get root inode failed [ 747.110443][ T3544] EXT4-fs (loop3): mount failed [ 747.116443][ T3552] EXT4-fs (loop5): Invalid log block size: 7 19:05:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x9000000) 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x10, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) [ 747.162491][ T3565] loop4: detected capacity change from 0 to 512 [ 747.170648][ T3544] loop3: detected capacity change from 0 to 512 [ 747.186421][ T3544] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 747.197922][ T3544] EXT4-fs (loop3): get root inode failed [ 747.203538][ T3544] EXT4-fs (loop3): mount failed 19:05:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x11, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000800000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f2e0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 747.221880][ T3565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 747.249398][ T3584] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:10 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000410000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1c, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa000000) [ 747.279542][ T3591] loop5: detected capacity change from 0 to 512 [ 747.291133][ T3591] EXT4-fs (loop5): Invalid log block size: 8 [ 747.304572][ T3596] loop3: detected capacity change from 0 to 512 19:05:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000900000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 747.347383][ T3605] loop4: detected capacity change from 0 to 512 [ 747.354178][ T3596] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 747.365699][ T3596] EXT4-fs (loop3): get root inode failed [ 747.371330][ T3596] EXT4-fs (loop3): mount failed [ 747.379472][ T3609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x31, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa160000) [ 747.397051][ T3605] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 747.430182][ T3621] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.434543][ T3617] loop5: detected capacity change from 0 to 512 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xb000000) [ 747.457212][ T3596] loop3: detected capacity change from 0 to 512 [ 747.464854][ T3617] EXT4-fs (loop5): Invalid log block size: 9 [ 747.487662][ T3596] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 747.499209][ T3596] EXT4-fs (loop3): get root inode failed 19:05:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002010000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x3d, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc000000) [ 747.504826][ T3596] EXT4-fs (loop3): mount failed [ 747.509034][ T3633] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 19:05:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f480000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000a00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x4}]}, 0xa8}}, 0x0) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xd000000) [ 747.569524][ T3646] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.596151][ T3644] loop4: detected capacity change from 0 to 512 19:05:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000011000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x5}]}, 0xa8}}, 0x0) [ 747.646999][ T3658] loop5: detected capacity change from 0 to 512 [ 747.657703][ T3659] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 747.670166][ T3660] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.676356][ T3658] EXT4-fs (loop5): Invalid log block size: 10 [ 747.686948][ T3666] loop3: detected capacity change from 0 to 512 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xe000000) 19:05:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000b00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 747.729368][ T3666] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 747.740869][ T3666] EXT4-fs (loop3): get root inode failed [ 747.746504][ T3666] EXT4-fs (loop3): mount failed [ 747.749543][ T3680] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 747.759825][ T3674] loop4: detected capacity change from 0 to 512 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x9}]}, 0xa8}}, 0x0) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x10000000) [ 747.783065][ T3681] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.795182][ T3685] loop5: detected capacity change from 0 to 512 [ 747.803455][ T3685] EXT4-fs (loop5): Invalid log block size: 11 19:05:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000012000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 747.854255][ T3666] loop3: detected capacity change from 0 to 512 [ 747.878582][ T3666] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 747.890107][ T3666] EXT4-fs (loop3): get root inode failed [ 747.895737][ T3666] EXT4-fs (loop3): mount failed [ 747.912579][ T3710] loop4: detected capacity change from 0 to 512 19:05:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f4c0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000c00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x11000000) 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0xf}]}, 0xa8}}, 0x0) 19:05:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000017000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x12000000) [ 747.992700][ T3727] loop5: detected capacity change from 0 to 512 [ 748.001572][ T3728] loop3: detected capacity change from 0 to 512 [ 748.006787][ T3733] loop4: detected capacity change from 0 to 512 [ 748.018864][ T3727] EXT4-fs (loop5): Invalid log block size: 12 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x10}]}, 0xa8}}, 0x0) 19:05:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x20000000) [ 748.042219][ T3728] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.053729][ T3728] EXT4-fs (loop3): get root inode failed [ 748.059400][ T3728] EXT4-fs (loop3): mount failed 19:05:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000018000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000d00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x11}]}, 0xa8}}, 0x0) [ 748.132607][ T3728] loop3: detected capacity change from 0 to 512 [ 748.153421][ T3760] loop5: detected capacity change from 0 to 512 [ 748.163135][ T3762] loop4: detected capacity change from 0 to 512 [ 748.170375][ T3728] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.181930][ T3728] EXT4-fs (loop3): get root inode failed [ 748.187571][ T3728] EXT4-fs (loop3): mount failed [ 748.193863][ T3760] EXT4-fs (loop5): Invalid log block size: 13 19:05:11 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x25000000) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x48}]}, 0xa8}}, 0x0) 19:05:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f600000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000019000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000e00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x94}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x28000000) [ 748.298219][ T3790] loop4: detected capacity change from 0 to 512 [ 748.314306][ T3794] loop5: detected capacity change from 0 to 512 [ 748.334902][ T3794] EXT4-fs (loop5): Invalid log block size: 14 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00a21c000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 748.361447][ T3807] loop3: detected capacity change from 0 to 512 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x300}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x48000000) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4c000000) [ 748.408273][ T3807] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.419779][ T3807] EXT4-fs (loop3): get root inode failed [ 748.425396][ T3807] EXT4-fs (loop3): mount failed [ 748.459597][ T3825] loop4: detected capacity change from 0 to 512 [ 748.468100][ T3807] loop3: detected capacity change from 0 to 512 [ 748.497610][ T3807] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.509100][ T3807] EXT4-fs (loop3): get root inode failed [ 748.514726][ T3807] EXT4-fs (loop3): mount failed 19:05:11 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000f00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000020000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0x116}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x60000000) 19:05:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f680000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 748.599934][ T3853] loop5: detected capacity change from 0 to 512 [ 748.607153][ T3854] loop4: detected capacity change from 0 to 512 [ 748.613965][ T3859] loop3: detected capacity change from 0 to 512 [ 748.629705][ T3853] EXT4-fs (loop5): Invalid log block size: 15 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x68000000) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0x12d}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6c000000) [ 748.649611][ T3859] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.661119][ T3859] EXT4-fs (loop3): get root inode failed [ 748.666796][ T3859] EXT4-fs (loop3): mount failed 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001020000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x74000000) [ 748.722184][ T3859] loop3: detected capacity change from 0 to 512 [ 748.754003][ T3859] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.765513][ T3859] EXT4-fs (loop3): get root inode failed [ 748.771191][ T3859] EXT4-fs (loop3): mount failed 19:05:11 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7a000000) 19:05:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f6c0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) [ 748.818924][ T3899] loop4: detected capacity change from 0 to 512 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000022000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x81ffffff) [ 748.874643][ T3910] loop5: detected capacity change from 0 to 512 [ 748.892094][ T3910] EXT4-fs (loop5): Invalid log block size: 16 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0xa8}}, 0x0) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x9effffff) [ 748.926235][ T3923] loop3: detected capacity change from 0 to 512 [ 748.939659][ T3923] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 748.951236][ T3923] EXT4-fs (loop3): get root inode failed [ 748.956935][ T3923] EXT4-fs (loop3): mount failed 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc00e0000) 19:05:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001100000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0xa8}}, 0x0) [ 748.990314][ T3932] loop4: detected capacity change from 0 to 512 [ 749.064889][ T3946] loop5: detected capacity change from 0 to 512 [ 749.086270][ T3923] loop3: detected capacity change from 0 to 512 [ 749.092576][ T3946] EXT4-fs (loop5): Invalid log block size: 17 19:05:11 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000025000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xeaffffff) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0xa8}}, 0x0) [ 749.109739][ T3923] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 749.121282][ T3923] EXT4-fs (loop3): get root inode failed [ 749.126924][ T3923] EXT4-fs (loop3): mount failed 19:05:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f740000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xefffffff) 19:05:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0xa8}}, 0x0) [ 749.158272][ T3967] loop4: detected capacity change from 0 to 512 19:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00002e000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 749.232512][ T3985] loop5: detected capacity change from 0 to 512 [ 749.242003][ T3989] loop3: detected capacity change from 0 to 512 [ 749.257782][ T3985] EXT4-fs (loop5): Invalid log block size: 18 [ 749.270545][ T3989] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xf0ffffff) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0xa8}}, 0x0) [ 749.282121][ T3989] EXT4-fs (loop3): get root inode failed [ 749.287768][ T3989] EXT4-fs (loop3): mount failed 19:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000001400000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 749.339648][ T4005] loop4: detected capacity change from 0 to 512 [ 749.360763][ T4012] loop5: detected capacity change from 0 to 512 [ 749.377381][ T3989] loop3: detected capacity change from 0 to 512 19:05:12 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xfeffffff) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0xa8}}, 0x0) [ 749.384846][ T4012] EXT4-fs (loop5): Invalid log block size: 20 19:05:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000036000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffff7f) [ 749.419028][ T3989] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 749.430554][ T3989] EXT4-fs (loop3): get root inode failed [ 749.436198][ T3989] EXT4-fs (loop3): mount failed 19:05:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f7a0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000002000000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0xa8}}, 0x0) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffff81) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffff9e) [ 749.529975][ T4049] loop5: detected capacity change from 0 to 512 [ 749.530738][ T4045] loop3: detected capacity change from 0 to 512 [ 749.546883][ T4049] EXT4-fs (loop5): Invalid log block size: 32 [ 749.552856][ T4053] loop4: detected capacity change from 0 to 512 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffffea) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb}]}, 0xa8}}, 0x0) [ 749.588251][ T4045] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 749.599817][ T4045] EXT4-fs (loop3): get root inode failed [ 749.605440][ T4045] EXT4-fs (loop3): mount failed 19:05:12 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00003f000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000002e00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffffef) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x300}]}, 0xa8}}, 0x0) [ 749.686061][ T4045] loop3: detected capacity change from 0 to 512 [ 749.696486][ T4045] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 749.707990][ T4045] EXT4-fs (loop3): get root inode failed [ 749.713616][ T4045] EXT4-fs (loop3): mount failed [ 749.735063][ T4087] loop4: detected capacity change from 0 to 512 [ 749.748587][ T4092] loop5: detected capacity change from 0 to 512 19:05:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fab0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xfffffff0) 19:05:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000040000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 749.776716][ T4092] EXT4-fs (loop5): Invalid log block size: 46 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x500}]}, 0xa8}}, 0x0) 19:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000003f00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x600}]}, 0xa8}}, 0x0) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xfffffffe) [ 749.863747][ T4112] loop5: detected capacity change from 0 to 512 [ 749.874463][ T4113] loop4: detected capacity change from 0 to 512 [ 749.884646][ T4116] loop3: detected capacity change from 0 to 512 19:05:12 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x700}]}, 0xa8}}, 0x0) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x40030000000000) [ 749.922529][ T4112] EXT4-fs (loop5): Invalid log block size: 63 [ 749.946303][ T4116] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 749.957843][ T4116] EXT4-fs (loop3): get root inode failed [ 749.963514][ T4116] EXT4-fs (loop3): mount failed 19:05:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000048000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000001fe00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 750.038837][ T4116] loop3: detected capacity change from 0 to 512 [ 750.053560][ T4116] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 750.055123][ T4147] loop5: detected capacity change from 0 to 512 [ 750.065062][ T4116] EXT4-fs (loop3): get root inode failed [ 750.076933][ T4116] EXT4-fs (loop3): mount failed [ 750.086873][ T4152] loop4: detected capacity change from 0 to 512 19:05:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fac0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x100000000000000) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x71c}]}, 0xa8}}, 0x0) 19:05:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00004c000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x900}]}, 0xa8}}, 0x0) [ 750.126309][ T4147] EXT4-fs (loop5): Invalid log block size: 254 19:05:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000ffffffff00000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 750.184820][ T4177] loop3: detected capacity change from 0 to 512 [ 750.197079][ T4180] loop4: detected capacity change from 0 to 512 [ 750.210643][ T4183] loop5: detected capacity change from 0 to 512 [ 750.212857][ T4177] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 750.228378][ T4177] EXT4-fs (loop3): get root inode failed 19:05:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x200000000000000) [ 750.233997][ T4177] EXT4-fs (loop3): mount failed 19:05:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb00}]}, 0xa8}}, 0x0) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x300000000000000) [ 750.259356][ T4183] EXT4-fs (loop5): Invalid log block size: 255 [ 750.288670][ T4177] loop3: detected capacity change from 0 to 512 [ 750.296865][ T4177] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000060000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1c07}]}, 0xa8}}, 0x0) [ 750.308485][ T4177] EXT4-fs (loop3): get root inode failed [ 750.314178][ T4177] EXT4-fs (loop3): mount failed 19:05:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fad0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x400000000000000) 19:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 750.385847][ T4215] loop4: detected capacity change from 0 to 512 19:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000068000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 750.433164][ T4227] loop3: detected capacity change from 0 to 512 [ 750.447979][ T4230] loop5: detected capacity change from 0 to 512 [ 750.469421][ T4227] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x500000000000000) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x30000}]}, 0xa8}}, 0x0) 19:05:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000300000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 750.480979][ T4227] EXT4-fs (loop3): get root inode failed [ 750.486843][ T4227] EXT4-fs (loop3): mount failed 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x600000000000000) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x34000}]}, 0xa8}}, 0x0) [ 750.564313][ T4227] loop3: detected capacity change from 0 to 512 [ 750.579541][ T4257] loop4: detected capacity change from 0 to 512 [ 750.586255][ T4227] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 750.597783][ T4227] EXT4-fs (loop3): get root inode failed [ 750.603404][ T4227] EXT4-fs (loop3): mount failed 19:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x700000000000000) [ 750.619030][ T4262] loop5: detected capacity change from 0 to 512 19:05:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000fae0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x400300}]}, 0xa8}}, 0x0) 19:05:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00006c000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x800000000000000) [ 750.746460][ T4284] loop5: detected capacity change from 0 to 512 [ 750.760973][ T4286] loop3: detected capacity change from 0 to 512 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x900000000000000) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000000}]}, 0xa8}}, 0x0) [ 750.799677][ T4286] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 750.811392][ T4286] EXT4-fs (loop3): get root inode failed [ 750.817035][ T4286] EXT4-fs (loop3): mount failed 19:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000500000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa00000000000000) [ 750.841826][ T4304] loop4: detected capacity change from 0 to 512 [ 750.891476][ T4286] loop3: detected capacity change from 0 to 512 [ 750.921039][ T4286] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 750.932536][ T4286] EXT4-fs (loop3): get root inode failed 19:05:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000074000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2000000}]}, 0xa8}}, 0x0) [ 750.937487][ T4324] loop5: detected capacity change from 0 to 512 [ 750.938270][ T4286] EXT4-fs (loop3): mount failed 19:05:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000faf0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000600000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xa16000000000000) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3000000}]}, 0xa8}}, 0x0) [ 750.997293][ T4339] loop4: detected capacity change from 0 to 512 [ 751.024738][ T4346] loop3: detected capacity change from 0 to 512 19:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00007a000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xb00000000000000) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc00000000000000) [ 751.082805][ T4357] loop5: detected capacity change from 0 to 512 [ 751.100039][ T4346] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 751.111641][ T4346] EXT4-fs (loop3): get root inode failed [ 751.117282][ T4346] EXT4-fs (loop3): mount failed 19:05:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000700000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xd00000000000000) 19:05:13 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4000000}]}, 0xa8}}, 0x0) [ 751.142486][ T4369] loop4: detected capacity change from 0 to 512 [ 751.178285][ T4346] loop3: detected capacity change from 0 to 512 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xe00000000000000) 19:05:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ffe0000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000194000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 0: r0 = open(0x0, 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 751.220819][ T4381] loop5: detected capacity change from 0 to 512 [ 751.227688][ T4346] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 751.239198][ T4346] EXT4-fs (loop3): get root inode failed [ 751.244815][ T4346] EXT4-fs (loop3): mount failed 19:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 0: r0 = open(0x0, 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5000000}]}, 0xa8}}, 0x0) 19:05:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00009a000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 751.320205][ T4406] loop3: detected capacity change from 0 to 512 [ 751.330547][ T4407] loop4: detected capacity change from 0 to 512 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x1000000000000000) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6000000}]}, 0xa8}}, 0x0) [ 751.388201][ T4418] loop5: detected capacity change from 0 to 512 [ 751.416695][ T4406] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 751.428214][ T4406] EXT4-fs (loop3): get root inode failed [ 751.433842][ T4406] EXT4-fs (loop3): mount failed 19:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x1100000000000000) 19:05:14 executing program 0: r0 = open(0x0, 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 751.462221][ T4438] loop4: detected capacity change from 0 to 512 [ 751.497385][ T4406] loop3: detected capacity change from 0 to 512 [ 751.508645][ T4451] loop5: detected capacity change from 0 to 512 [ 751.515707][ T4451] ================================================================== [ 751.523785][ T4451] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lrus_cpu [ 751.531620][ T4451] [ 751.533928][ T4451] write to 0xffff888237c42f10 of 8 bytes by task 4454 on cpu 0: [ 751.541539][ T4451] invalidate_bh_lrus_cpu+0xad/0xe0 [ 751.546730][ T4451] lru_add_drain_cpu+0x243/0x270 [ 751.551649][ T4451] lru_add_drain+0x28/0x40 [ 751.556049][ T4451] exit_mmap+0x208/0x460 [ 751.560276][ T4451] __mmput+0x27/0x1c0 [ 751.564243][ T4451] mmput+0x3d/0x50 [ 751.567945][ T4451] free_bprm+0xce/0x1f0 [ 751.572095][ T4451] kernel_execve+0x4e9/0x640 [ 751.576666][ T4451] call_usermodehelper_exec_async+0x1d8/0x290 [ 751.582721][ T4451] ret_from_fork+0x1f/0x30 [ 751.587122][ T4451] [ 751.589432][ T4451] read to 0xffff888237c42f10 of 8 bytes by task 4451 on cpu 1: [ 751.596968][ T4451] has_bh_in_lru+0x31/0x1c0 [ 751.601459][ T4451] smp_call_function_many_cond+0x226/0x620 [ 751.607252][ T4451] on_each_cpu_cond_mask+0x31/0x40 [ 751.612349][ T4451] invalidate_bh_lrus+0x26/0x30 [ 751.617185][ T4451] set_blocksize+0x242/0x270 [ 751.621848][ T4451] sb_set_blocksize+0x2c/0xa0 [ 751.626510][ T4451] ext4_fill_super+0x2233/0x7ff0 [ 751.631432][ T4451] mount_bdev+0x1e8/0x290 [ 751.635762][ T4451] ext4_mount+0x2d/0x40 [ 751.639912][ T4451] legacy_get_tree+0x70/0xc0 [ 751.644484][ T4451] vfs_get_tree+0x4a/0x1a0 [ 751.648886][ T4451] path_mount+0x11d4/0x1ce0 [ 751.653383][ T4451] __se_sys_mount+0x23d/0x2e0 [ 751.658040][ T4451] __x64_sys_mount+0x63/0x70 [ 751.662612][ T4451] do_syscall_64+0x3d/0x90 [ 751.667106][ T4451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.672983][ T4451] [ 751.675298][ T4451] value changed: 0xffff88810639eaf8 -> 0x0000000000000000 [ 751.682401][ T4451] [ 751.684708][ T4451] Reported by Kernel Concurrency Sanitizer on: [ 751.690831][ T4451] CPU: 1 PID: 4451 Comm: syz-executor.5 Not tainted 5.14.0-rc6-syzkaller #0 [ 751.699501][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:05:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000ff80100000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x1200000000000000) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7000000}]}, 0xa8}}, 0x0) 19:05:14 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00009b000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000a00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 751.709536][ T4451] ================================================================== [ 751.728747][ T4406] EXT4-fs: failed to create workqueue [ 751.734130][ T4406] EXT4-fs (loop3): mount failed 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8000000}]}, 0xa8}}, 0x0) 19:05:14 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2000000000000000) [ 751.785990][ T4470] loop4: detected capacity change from 0 to 512 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2500000000000000) 19:05:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00009c000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 751.841182][ T4488] loop3: detected capacity change from 0 to 512 [ 751.841808][ T4490] __nla_validate_parse: 41 callbacks suppressed [ 751.841819][ T4490] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 751.861021][ T4492] loop5: detected capacity change from 0 to 512 19:05:14 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 751.889763][ T4488] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 751.901334][ T4488] EXT4-fs (loop3): get root inode failed [ 751.906996][ T4488] EXT4-fs (loop3): mount failed [ 751.907230][ T4501] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 751.947097][ T4509] loop4: detected capacity change from 0 to 512 [ 751.989230][ T4488] loop3: detected capacity change from 0 to 512 [ 752.001866][ T4488] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.013373][ T4488] EXT4-fs (loop3): get root inode failed [ 752.019032][ T4488] EXT4-fs (loop3): mount failed 19:05:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f040200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x2800000000000000) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9000000}]}, 0xa8}}, 0x0) 19:05:14 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00009d000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000b00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb000000}]}, 0xa8}}, 0x0) [ 752.088062][ T4534] loop3: detected capacity change from 0 to 512 [ 752.110800][ T4539] loop5: detected capacity change from 0 to 512 [ 752.118800][ T4541] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.129567][ T4537] loop4: detected capacity change from 0 to 512 19:05:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4800000000000000) 19:05:14 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1c070000}]}, 0xa8}}, 0x0) 19:05:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 752.136102][ T4534] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.147658][ T4534] EXT4-fs (loop3): get root inode failed [ 752.153276][ T4534] EXT4-fs (loop3): mount failed 19:05:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00009e000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9effffff}]}, 0xa8}}, 0x0) [ 752.197110][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.248978][ T4534] loop3: detected capacity change from 0 to 512 [ 752.257817][ T4569] loop5: detected capacity change from 0 to 512 [ 752.265297][ T4574] loop4: detected capacity change from 0 to 512 [ 752.269618][ T4534] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.283087][ T4534] EXT4-fs (loop3): get root inode failed [ 752.288734][ T4534] EXT4-fs (loop3): mount failed 19:05:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000300000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x4c00000000000000) 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xefffffff}]}, 0xa8}}, 0x0) 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000d00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001ca2000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf0ffffff}]}, 0xa8}}, 0x0) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000e00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 752.378746][ T4596] loop5: detected capacity change from 0 to 512 [ 752.405474][ T4602] loop4: detected capacity change from 0 to 512 [ 752.412137][ T4604] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.417609][ T4603] loop3: detected capacity change from 0 to 512 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6000000000000000) 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003c5000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 752.464657][ T4603] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.476179][ T4603] EXT4-fs (loop3): get root inode failed [ 752.481800][ T4603] EXT4-fs (loop3): mount failed 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 752.505687][ T4624] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.532715][ T4603] loop3: detected capacity change from 0 to 512 [ 752.546364][ T4633] loop4: detected capacity change from 0 to 512 19:05:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f020400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffff7f}]}, 0xa8}}, 0x0) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6800000000000000) 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000f00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003c6000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 752.554267][ T4635] loop5: detected capacity change from 0 to 512 [ 752.556202][ T4603] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.572028][ T4603] EXT4-fs (loop3): get root inode failed [ 752.577669][ T4603] EXT4-fs (loop3): mount failed 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffff9e}]}, 0xa8}}, 0x0) 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x6c00000000000000) [ 752.649556][ T4657] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.659836][ T4659] loop4: detected capacity change from 0 to 512 [ 752.669746][ T4660] loop5: detected capacity change from 0 to 512 [ 752.681102][ T4663] loop3: detected capacity change from 0 to 512 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003c7000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 752.729180][ T4663] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.740692][ T4663] EXT4-fs (loop3): get root inode failed [ 752.746617][ T4663] EXT4-fs (loop3): mount failed [ 752.755540][ T4681] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.797484][ T4663] loop3: detected capacity change from 0 to 512 [ 752.810813][ T4693] loop5: detected capacity change from 0 to 512 [ 752.821750][ T4663] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.833261][ T4663] EXT4-fs (loop3): get root inode failed [ 752.838895][ T4663] EXT4-fs (loop3): mount failed [ 752.846465][ T4697] loop4: detected capacity change from 0 to 512 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7400000000000000) 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffef}]}, 0xa8}}, 0x0) 19:05:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f060400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001100000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003c8000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 752.906130][ T4720] loop3: detected capacity change from 0 to 512 [ 752.913971][ T4721] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.928305][ T4722] loop5: detected capacity change from 0 to 512 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff0}]}, 0xa8}}, 0x0) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x7a00000000000000) [ 752.949081][ T4720] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 752.949319][ T4730] loop4: detected capacity change from 0 to 512 [ 752.960582][ T4720] EXT4-fs (loop3): get root inode failed [ 752.972424][ T4720] EXT4-fs (loop3): mount failed 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 753.008904][ T4720] loop3: detected capacity change from 0 to 512 [ 753.028146][ T4743] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.046045][ T4720] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003c9000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 753.057595][ T4720] EXT4-fs (loop3): get root inode failed [ 753.063208][ T4720] EXT4-fs (loop3): mount failed 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xf}}, 0x0) 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x8000000000000000) [ 753.115373][ T4756] loop5: detected capacity change from 0 to 512 [ 753.134649][ T4763] loop4: detected capacity change from 0 to 512 19:05:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x10}}, 0x0) 19:05:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f100400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x81ffffff00000000) 19:05:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003e8000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x14}}, 0x0) [ 753.231424][ T4792] loop5: detected capacity change from 0 to 512 [ 753.244607][ T4793] loop3: detected capacity change from 0 to 512 [ 753.251820][ T4795] loop4: detected capacity change from 0 to 512 [ 753.269488][ T4793] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block 19:05:16 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x9effffff00000000) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xc00e000000000000) 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00c0ed000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 753.280975][ T4793] EXT4-fs (loop3): get root inode failed [ 753.286621][ T4793] EXT4-fs (loop3): mount failed 19:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f001900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xeaffffff00000000) 19:05:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000500000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc0}}, 0x0) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xefffffff00000000) 19:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 753.379351][ T4793] loop3: detected capacity change from 0 to 512 [ 753.392528][ T4831] loop5: detected capacity change from 0 to 512 [ 753.397684][ T4793] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 753.399723][ T4832] loop4: detected capacity change from 0 to 512 [ 753.410258][ T4793] EXT4-fs (loop3): get root inode failed [ 753.410275][ T4793] EXT4-fs (loop3): mount failed 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0001f8000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xf0ffffff00000000) [ 753.497054][ T4854] loop5: detected capacity change from 0 to 512 [ 753.500722][ T4856] loop3: detected capacity change from 0 to 512 [ 753.536512][ T4865] loop4: detected capacity change from 0 to 512 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xec0}}, 0x0) 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003fd000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) [ 753.556384][ T4856] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 753.567884][ T4856] EXT4-fs (loop3): get root inode failed [ 753.573510][ T4856] EXT4-fs (loop3): mount failed 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xfeffffff00000000) [ 753.656457][ T4856] loop3: detected capacity change from 0 to 512 [ 753.659359][ T4889] loop4: detected capacity change from 0 to 512 [ 753.673670][ T4856] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 753.685284][ T4856] EXT4-fs (loop3): get root inode failed [ 753.690982][ T4856] EXT4-fs (loop3): mount failed 19:05:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000600000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002500000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 0: open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x33fe0}}, 0x0) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffff7f00000000) 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003fe000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0xffffffff00000000) 19:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f002e00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 753.776191][ T4911] loop5: detected capacity change from 0 to 512 [ 753.784812][ T4913] loop4: detected capacity change from 0 to 512 [ 753.810895][ T4921] loop3: detected capacity change from 0 to 512 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x200002e8}}, 0x0) 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00fffe000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 0: open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000001"], 0x4c}}, 0x0) [ 753.892042][ T4921] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 753.903557][ T4921] EXT4-fs (loop3): get root inode failed [ 753.909200][ T4921] EXT4-fs (loop3): mount failed [ 753.919256][ T4943] loop5: detected capacity change from 0 to 512 [ 753.927751][ T4945] loop4: detected capacity change from 0 to 512 [ 753.997459][ T4921] loop3: detected capacity change from 0 to 512 [ 754.010814][ T4921] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.022369][ T4921] EXT4-fs (loop3): get root inode failed [ 754.028029][ T4921] EXT4-fs (loop3): mount failed 19:05:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f040600000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 2: semget$private(0x0, 0x2, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f64f501170048000000000000200000"], 0x4c}}, 0x0) 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7ffff000}}, 0x0) 19:05:16 executing program 0: open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f0003ff000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f003200000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xfffffdef}}, 0x0) 19:05:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 754.104186][ T4977] loop5: detected capacity change from 0 to 512 [ 754.116943][ T4980] loop4: detected capacity change from 0 to 512 [ 754.117867][ T4984] loop3: detected capacity change from 0 to 512 19:05:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x43, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r4, @ANYBLOB="040002000000000008000000", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100001000000000020"], 0x44, 0x0) r6 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001300)={'\x00', 0x0, 0x4, 0x2, 0x1c7, 0x0, 0xffffffffffffffff}) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x56772225f41cd0f0) r8 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000001300)={'\x00', 0x0, 0x4, 0x2, 0x1c7, 0x0, 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000000540)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000100)={0x1b4, 0x23, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@typed={0xc, 0x3e, 0x0, 0x0, @u64=0xffffffffffffff80}, @nested={0x14f, 0x66, 0x0, 0x1, [@generic="134826969ef5117402835c7747ba73f6dcc178592026580d4b5a2eaad7200f7251d6ea890e73f63fd82a671eefcabf6faa8adff3fd4acf87ca0c3319550b0abe4f307a9fdd3a10126cade0b7f0e070005717ef922a21364b3d1f936d72ae99c9427d2fd049c7e54ff6a2f7ea8ff36cdb849d4559f4ffe3c70c7a32b6a06487597c7f7e3f4568f6cde1ba96c202ebda657a039fcf2aa8", @generic="1dde1619398d2918f30a337e8647cfcd79534a339851b9fb980831c427a012f556d26a8f5fed5c12d694189d36980a728fa51e512e3d7e12623a1cac1a4fe9b25fb3c5b3ced75beb4f10b078a37c88a4fcc67da372ebb248d77adbff919be7155c41177c25e3b582a4e75ea4cf97ca1b7225612ed1a1ecf53b793e022d1e6c7bf951056728b3e0b75c7d232501761f15010dd717", @generic="cde29f74cbefe7eaa86bd9262d00b5d79a1b3e819689e3e0f7c869d3198d79e6a9"]}, @generic="944a6d904926aef7deb1e73c77cd1b1d7bafbd63b6b7087ddb790163608dffd8bb4b3bd1f06996e1b0cfc95d6814ae1b0b5103702a1179a39767d8c1e3b7ea3da207eb87ab2f64"]}, 0x1b4}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r5}}}, @rights={{0x28, 0x1, 0x1, [r0, r6, r0, r7, r0, r8]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x80, 0x40000}, 0x80) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) 19:05:16 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) 19:05:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000fff000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x2}, 0x0) [ 754.191290][ T4984] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.202859][ T4984] EXT4-fs (loop3): get root inode failed [ 754.208645][ T4984] EXT4-fs (loop3): mount failed [ 754.230832][ T5004] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.239478][ T5004] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.247643][ T5011] loop5: detected capacity change from 0 to 512 [ 754.247767][ T5004] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.261405][ T5014] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.270702][ T4984] loop3: detected capacity change from 0 to 512 19:05:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000700000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x3}, 0x0) 19:05:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001300)={'\x00', 0x0, 0x4, 0x2, 0x1c7, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001300)={'\x00', 0x0, 0x4, 0x2, 0x1c7, 0x0, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0, 0x2}, {r1, 0x220}], 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000100)) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) 19:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f004c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00feff000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 754.285486][ T4984] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.297085][ T4984] EXT4-fs (loop3): get root inode failed [ 754.302804][ T4984] EXT4-fs (loop3): mount failed [ 754.321145][ T5024] loop4: detected capacity change from 0 to 512 19:05:17 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x24, "ed005400000000003ec13e20000000eb00df0000000000001f00"}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x4}, 0x0) [ 754.362362][ T5038] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.377390][ T5038] blktrace: Concurrent blktraces are not allowed on sg0 19:05:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 754.408802][ T5038] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.417080][ T5047] loop3: detected capacity change from 0 to 512 [ 754.422095][ T5046] loop5: detected capacity change from 0 to 512 [ 754.432990][ T5048] blktrace: Concurrent blktraces are not allowed on sg0 [ 754.443899][ T5058] loop4: detected capacity change from 0 to 512 19:05:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/192, 0xc0}], 0x5, 0x2, 0x1) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x80, 0x1, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="3cc692be7e0c909f845311df62c316420069e77584b9b74025dafe1094b66963d7a9c3d7a60b5ae8b5c7ada4b2c26e7514e2e7b8ffb71862a0c4e4ee3a50de959c36db290f800ce9ffb00b28458b5dd9b3338cb3d57ccfc4bec890679137019833320bebcb01d7caac48d0646e5b8d85e5eb1ff95942f7abaadecfc41c6218d12a6e4304c1efb4719e319ed98ca34f16326a866bdcf634435939660676e69aaf7d1acfe18ee54c5d21b175d303f799be028626296a745d24cceb632c379756a54d8b54c84790c9c22cfedceb29481754198755e0189518e13fd48789069ffc5adb805aac834b2d60b51e1794225f1a10", 0xf0}, {&(0x7f0000000240)="3acfcd6501a275f2a7d965cf4f2ddc40bc6bd829435af6e33c0447cab2b8e463ff60a54c39784de64eb5be9dbfc05b3bd24cf6ffa833424886381ed49848bb9855d1256cc8263a6aa2d348afd0e892ce3d5cbbeabeb829b0de788549236af41284209bd2b470aca1bc85000694dc6704f3ef48acc58fc5437ed635ae3f615bbf3026b44a4999253c545915e75d984e614d5133a0e923d8e21d90068574b994e5bd3c12c17fb0df45cf73e231bed16a000ab39ad7cb0f030a20b39762eace4c347cfeb2fee7526a0dad1cdd4b083cc6477bffd6dcbb", 0xd5}], 0x2, &(0x7f0000000380)}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000380)=0x2, 0x4) 19:05:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) [ 754.451891][ T5047] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.463397][ T5047] EXT4-fs (loop3): get root inode failed [ 754.469028][ T5047] EXT4-fs (loop3): mount failed 19:05:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x5}, 0x0) 19:05:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000900000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000020000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc000180}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x48040}, 0x40) r1 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001300)={'\x00', 0x2, 0x1, 0x2, 0x1c7, 0x0, 0xffffffffffffffff}) ftruncate(r1, 0x8) [ 754.527256][ T5047] loop3: detected capacity change from 0 to 512 [ 754.540299][ T5047] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.551803][ T5047] EXT4-fs (loop3): get root inode failed [ 754.557444][ T5047] EXT4-fs (loop3): mount failed [ 754.570785][ T5082] loop5: detected capacity change from 0 to 512 19:05:17 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006800000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x6}, 0x0) [ 754.641316][ T5107] loop3: detected capacity change from 0 to 512 [ 754.644848][ T5103] loop4: detected capacity change from 0 to 512 [ 754.656018][ T5105] selinux_netlink_send: 5 callbacks suppressed [ 754.656039][ T5105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5105 comm=syz-executor.2 [ 754.684061][ T5103] EXT4-fs (loop4): failed to initialize system zone (-117) [ 754.691490][ T5103] EXT4-fs (loop4): mount failed [ 754.693151][ T5107] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.707841][ T5107] EXT4-fs (loop3): get root inode failed [ 754.713473][ T5107] EXT4-fs (loop3): mount failed [ 754.719844][ T5105] blktrace: Concurrent blktraces are not allowed on sg0 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x7}, 0x0) [ 754.736345][ T5115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5115 comm=syz-executor.2 [ 754.749468][ T5115] blktrace: Concurrent blktraces are not allowed on sg0 19:05:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f00ffff030000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x8}, 0x0) [ 754.784719][ T5125] loop5: detected capacity change from 0 to 512 19:05:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x43, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0x6, 0xda7, 0x1, 0x38c}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r2, 0x29, 0x21, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @nfc={0x27, 0x0, 0x0, 0x1}, @qipcrtr={0x2a, 0x0, 0x8000}, @qipcrtr={0x2a, 0x1, 0x7ffe}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x2, 0x1}) [ 754.834007][ T5133] loop4: detected capacity change from 0 to 512 [ 754.843885][ T5107] loop3: detected capacity change from 0 to 512 [ 754.872445][ T5107] EXT4-fs error (device loop3): __ext4_iget:4847: inode #2: block 63503: comm syz-executor.3: invalid block [ 754.884006][ T5107] EXT4-fs (loop3): get root inode failed [ 754.889100][ T5133] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 754.889654][ T5107] EXT4-fs (loop3): mount failed [ 754.899732][ T5133] EXT4-fs (loop4): group descriptors corrupted! 19:05:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000a00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616b8f9b5a20ff8", 0x2a, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f006c00000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @random="d80516aa9185"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4d, 0x2c, 0x1000}}, [{0xdd, 0x6, "c6516533490c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}, 0x9}, 0x0) 19:05:17 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1eb142, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x3) 19:05:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000680)={r1, 0x9a, 0x0, 0x3}) r3 = dup3(r2, r2, 0x80000) mq_notify(r3, &(0x7f00000004c0)={0x0, 0x40bc, 0x0, @thr={&(0x7f00000006c0)="4558a68921309523e05e2f7f3250d11fa869e90df56e9d46245e75353496904d78cb97ebd1f63dbde7ef2eaa928af3bc4b6b942fbdfb0ff6b36a67d126df8b12a6d4fbb2e82fa66abcbbbe03d4bb8ce45cb28a3f3e13e3a6fbce639a559a80b8a52725d3323cd83a8df1bda53521a3f3f728b70d94e1684a10d33a32e7b2d41b74bd78d87508d8c85ea4465382de096d2e488a184bd2e892fadc98d183", &(0x7f0000000e80)="ebba6fbba398afff55a200eb60180d150ea0709b5628a478a337ad775dad226953b86b6589ec53209808ba9e872d77a0a67c2d739e98b1ad135ac2258c22c361a48f938ea30559effcd5190e83d01ced7e0a39a8770a7f28b8780f27b960de4f479cde61216a355fc4f107a5a083753cf0cdab83c3"}}) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000f80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000100)={0xe0c, 0x0, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x4}, 0x5, 0x5, 0xef0, 0x2, 0x19, 'syz1\x00', "b90cd20a607f31759025d1908b99e90a793dbc0b510431f21952a74412d25714", "8f31c03c9b955b3ede3f2d041ba4b13c6e059de28f0c75857671eefa413fcb8d", [{0x8, 0x4, {0x3, 0x9}}, {0x9, 0x6, {0x3, 0x2}}, {0x400, 0x4cf, {0x1, 0xffff}}, {0x3ff, 0x2, {0x0, 0x81}}, {0x31, 0x7fff, {0x1, 0x10001}}, {0x7, 0x1, {0x2, 0x1}}, {0x9, 0x86, {0x3, 0x4}}, {0xd2ed, 0x4, {0x3, 0x57}}, {0x0, 0x400, {0x0, 0xefc2}}, {0x1, 0x81, {0x2, 0x101}}, {0x6, 0x1f, {0x2, 0x40}}, {0x3, 0x0, {0x2, 0x6}}, {0x6, 0xef7, {0x2, 0xd2}}, {0x2, 0x2, {0x0, 0x9}}, {0x279f, 0x200, {0x1, 0xa20e}}, {0x400, 0x9, {0x1, 0x9}}, {0xffe0, 0x8, {0x3}}, {0x1, 0x9, {0x1, 0x9}}, {0x4, 0x4, {0x0, 0x1f}}, {0x554, 0x7, {0x2, 0x7fff}}, {0x7, 0x3ff, {0x1, 0x8}}, {0x3, 0x6, {0x2, 0x1}}, {0x27f, 0xbcb, {0x3, 0x20}}, {0x9, 0x0, {0x0, 0x1}}, {0x5, 0x0, {0x2, 0x7}}, {0x5f, 0x101, {0x1, 0xf3a}}, {0x5, 0x2, {0x2, 0x7}}, {0x5, 0x0, {0x1, 0x6}}, {0x1ff, 0x7fff, {0x3, 0xe5c5}}, {0x80, 0x9, {0x0, 0x5}}, {0x3, 0x0, {0x2, 0x8}}, {0x800, 0xffe1, {0x1, 0x3}}, {0x0, 0x8, {0x1, 0x2}}, {0x5, 0x1, {0x3, 0x3ff}}, {0x3, 0x800, {0x1}}, {0x7, 0x7f, {0x2, 0x80000000}}, {0xab6, 0xfffd, {0x1, 0x2d}}, {0xffff, 0x0, {0x3, 0x3}}, {0xd3d7, 0x3, {0x0, 0x5}}, {0xfa, 0x5, {0x0, 0xfffffffa}}]}}}, {{0x254, 0x1, {{0x1}, 0x4, 0x3, 0x6, 0xf800, 0xb, 'syz1\x00', "28051db9b2839ec21c32390444e7c5d3b8dc3c69c194c966fb29ba28bb5880d8", "f15bea853db2d72210a61a6350111c3331b4434e39751c8e9380630e1d682882", [{0x6, 0x3, {0x0, 0xe18b}}, {0x7f, 0xeb, {0x1, 0xfffffff8}}, {0x4, 0x1, {0x0, 0xfffffffc}}, {0x1, 0x0, {0x3, 0x7}}, {0x100, 0x1dda, {0x1, 0x80000}}, {0x3f8, 0x7f, {0x3, 0xfffffffc}}, {0xffff, 0xffff, {0x1, 0x4}}, {0x3, 0xd7, {0x3, 0x5}}, {0x3, 0x101, {0x3, 0x80000000}}, {0x20, 0x0, {0x2, 0xfff}}, {0x800, 0xf000, {0x0, 0x9c}}, {0x5, 0x400, {0x3, 0x76}}, {0x99c, 0x5, {0x0, 0x101}}, {0x1, 0x80, {0x1, 0x81}}, {0x5, 0x6, {0x0, 0x5}}, {0x7, 0x4, {0x3, 0x6}}, {0x8, 0x1, {0x3, 0xb831}}, {0x5, 0x101, {0x0, 0x7}}, {0x9, 0x2, {0x3, 0x8000}}, {0x200, 0x5a}, {0x800, 0x7f, {0x3, 0x5}}, {0x20, 0x1, {0x1, 0xfffff800}}, {0x7fff, 0x6, {0x3, 0x7}}, {0xf996, 0x7, {0x0, 0x9}}, {0x7, 0xffff, {0x0, 0x2}}, {0x7c6e, 0x7, {0x0, 0x9}}, {0x5, 0x1ff, {0x1, 0x7fff}}, {0x1ff, 0x400, {0x3}}, {0x9, 0x400, {0x3, 0xffff78c2}}, {0x7fff, 0x1, {0x0, 0x7f}}, {0x4, 0xe1, {0x0, 0x9}}, {0x1, 0x2a4, {0x3, 0x80000000}}, {0x1, 0x7}, {0x5, 0x339, {0x1, 0x9}}, {0x7fff, 0x0, {0x0, 0x400}}, {0x6, 0xee04, {0x0, 0x8}}, {0x1, 0x81, {0x1, 0x2}}, {0x9, 0xb8e8, {0x3, 0x1}}, {0xe01a, 0x4, {0x3, 0x2}}, {0x1, 0x77d2, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x7, 0x26, 0x4, 0x0, 0x5, 'syz1\x00', "9ab5d813852abb26fcc7a4ca37a0715365b38b5f122f03fd1e20852bb231d90e", "2ef1bafd777acaa905c3aefb29b96d9082dac86af339f2ce6273dcf0571bc25a", [{0x0, 0x2, {0x1, 0x8}}, {0xcf4, 0x1ff, {0x1, 0x200}}, {0x7fff, 0x9, {0x2, 0x4}}, {0xfff, 0x6, {0x2, 0x9f3}}, {0x4, 0x6, {0x1, 0x10000}}, {0x100, 0xaa8, {0x0, 0xfffff800}}, {0x0, 0x7fff, {0x1, 0x8}}, {0xd0c, 0x5, {0x2, 0x2}}, {0x7, 0x3, {0x0, 0x20}}, {0x9, 0x50d, {0x1, 0x3f}}, {0x5, 0x1, {0x3, 0x1}}, {0x800, 0x4, {0x3, 0x5}}, {0x0, 0x8, {0x2, 0xc904}}, {0x7f, 0x5, {0x2, 0x80000001}}, {0x3, 0x7, {0x3, 0x3}}, {0x0, 0x8, {0x3, 0xffffffad}}, {0x401, 0x8, {0x0, 0xc9}}, {0xffe1, 0x0, {0x1, 0x5}}, {0x3, 0x4, {0x1, 0x7f}}, {0x80, 0x1000, {0x3, 0xf31}}, {0x8, 0xfffe, {0x1, 0xbca9}}, {0x6, 0x1f, {0x3}}, {0x2, 0x5, {0x2, 0x5}}, {0x294, 0x3, {0x0, 0x2}}, {0x0, 0xfffa, {0x3, 0x7}}, {0xbdfb, 0x3, {0x2, 0xfc9}}, {0x8001, 0x0, {0x2, 0x6}}, {0xfffc, 0x3, {0x1, 0x3ff}}, {0xd410, 0xfff7, {0x1, 0x1}}, {0x5b4a, 0x0, {0x3, 0xac6}}, {0x1000, 0x2, {0x1, 0x4}}, {0x0, 0x0, {0x0, 0x50b3}}, {0x7, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x20}}, {0x8, 0xabb1, {0x0, 0x1}}, {0xff, 0x3, {0x3, 0x7}}, {0x3f, 0x8, {0x1, 0xea}}, {0x2, 0x5, {0x3, 0x8}}, {0x5, 0xf06, {0x3}}, {0x3, 0x2, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x81, 0x8, 0x0, 0x7, 0x24, 'syz1\x00', "98937ad75bc113626b46933f330857e33834c5e81d0c5deeb1a53527b4cc45b6", "7ad17b3554bae2bf56f95185b8adf4fed6ca4790192242f6d7905f7e82313852", [{0x67, 0x0, {0x661bd9f2006030c0, 0x3bb3}}, {0x0, 0x92e2, {0x3, 0x7f}}, {0x3, 0x1, {0x0, 0x5}}, {0x8001, 0xfeff, {0x2}}, {0xf73d, 0x7400, {0x0, 0x7}}, {0x4, 0xda45, {0x3, 0x200}}, {0x3, 0x6, {0x1, 0x3}}, {0x5, 0x5, {0x2, 0x33}}, {0x100, 0x7ff, {0x2, 0x30}}, {0x7, 0x7c, {0x1, 0x5}}, {0xefb4, 0x401, {0x3, 0x40}}, {0x81, 0x6, {0x3, 0x3}}, {0x3, 0x401, {0x0, 0x49b5}}, {0x101, 0x7, {0x0, 0xbe}}, {0x3, 0x6, {0x3, 0x3}}, {0x3ff, 0xfff7, {0x1, 0x7}}, {0x7, 0x7fff, {0x0, 0x6}}, {0x7, 0x6, {0x2, 0xf3e}}, {0x6, 0x1, {0x2, 0xfffeffff}}, {0x18, 0x4, {0x3, 0x1000}}, {0x8001, 0x2, {0x1, 0x401}}, {0x1, 0x0, {0x3, 0x2}}, {0x3, 0x100, {0x0, 0x3}}, {0x4, 0x7, {0x1, 0x80000000}}, {0x4, 0xeb, {0x2, 0x2000000}}, {0xfffb, 0x3, {0x3, 0x2}}, {0x5, 0xfd12, {0x2, 0x9}}, {0x5, 0x0, {0x3, 0x2}}, {0x20, 0x9, {0x1, 0x7fff}}, {0x4392, 0x6, {0x1, 0x1000}}, {0x8, 0x7fff, {0x2}}, {0x179, 0x0, {0x2, 0x40000}}, {0x1ff, 0x2, {0x2, 0x5dd}}, {0x7ff, 0xa64, {0x2, 0x1f}}, {0x4, 0x2d, {0x0, 0x1bfd}}, {0x0, 0x1, {0x1, 0x8}}, {0x800, 0x2, {0x1, 0x1ff}}, {0x2, 0x2, {0x2, 0xf}}, {0x93ca, 0x800, {0x1, 0x8001}}, {0x4, 0x1, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x10000000}, 0x7, 0x4, 0xffcf, 0x0, 0x23, 'syz1\x00', "6312f2a06221b8168ad48d8eb05d033778a46588cb20767a0656bf3c12715e47", "1223fb48b413cef6ff94b52c3a58cb1af52a71899d2858017961d1c4e9a86c3c", [{0x5, 0x8, {0x0, 0xffff8b2f}}, {0x7fff, 0x1ff, {0x0, 0xff}}, {0x3, 0x1, {0x3, 0x1d}}, {0x20, 0x5, {0x3, 0xffffffff}}, {0x101, 0x7, {0x3, 0x1}}, {0xc0d, 0x4, {0x3, 0x8}}, {0x8, 0x101, {0x3, 0x2}}, {0x0, 0x0, {0x3, 0x7}}, {0x3f, 0x4, {0x3, 0x9}}, {0x200, 0x1, {0x1, 0x7}}, {0x1, 0x400, {0x3, 0x4}}, {0x2, 0x1, {0x0, 0x1}}, {0x5, 0x0, {0x2, 0x6}}, {0x2, 0x3, {0x1, 0x7fff}}, {0x40, 0x4, {0x1, 0x6}}, {0x3ff, 0x5, {0x2, 0x6}}, {0x7, 0x3}, {0x1, 0x12, {0x2, 0xfffffffa}}, {0xffff, 0xff, {0x2, 0x6}}, {0x9, 0x101, {0x1}}, {0x7, 0x7, {0x1, 0x10000}}, {0x7, 0x7, {0x3, 0x5}}, {0x2, 0xa68, {0x1, 0x1}}, {0x3ff, 0x5, {0x2, 0x5}}, {0x8011, 0xfffb, {0x0, 0x9}}, {0x6, 0x6, {0x0, 0x1000}}, {0x7000, 0x2, {0x1, 0x7}}, {0x599b, 0x401, {0x1, 0x10000}}, {0x8001, 0x2, {0x0, 0xf0}}, {0x2000, 0x1000, {0x1, 0x800}}, {0x101, 0x20, {0x1, 0x9}}, {0x1f, 0xffff, {0x0, 0x9}}, {0x8, 0x6, {0x1, 0xfffffffc}}, {0x0, 0x6, {0x0, 0x400}}, {0x1f, 0xff, {0x1, 0x8}}, {0x8001, 0xb8, {0x0, 0xfff}}, {0x3c, 0x1, {0x0, 0x4}}, {0x4, 0xd0e7, {0x1, 0x3f32}}, {0x85c1, 0x18, {0x3, 0x5}}, {0x0, 0xfb95, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x9, 0x30, 0x5, 0x6, 0x0, 'syz1\x00', "5c17b76839e3650c98628bb675572e2a634fec258af952b870d3be653f3cb0d2", "c69db376b92049f991d01def52a7270a0387bf0a88d9dd5cb363bc082fa561cb", [{0x7, 0x7f, {0x1, 0xffffffff}}, {0x1, 0x8, {0x1, 0x3ff}}, {0x3, 0x0, {0x3, 0xabc5}}, {0x400, 0x3, {0x3, 0x4}}, {0x6, 0x5, {0x1, 0x6}}, {0x28, 0x7, {0x0, 0x3}}, {0x4, 0xb3, {0x0, 0x8000}}, {0x8, 0x400, {0x3, 0x7}}, {0x7f, 0x4, {0x3, 0x4}}, {0x5, 0x3f, {0x0, 0x3}}, {0x8d, 0x7, {0x0, 0x9}}, {0x1, 0x1000, {0x0, 0x2}}, {0x80, 0x1, {0x3, 0x400}}, {0x1, 0x101, {0x3, 0x10001}}, {0x8, 0x1f, {0x1, 0xa45d}}, {0x4, 0x800, {0x3, 0x101}}, {0x1, 0x9, {0x1, 0xfff00000}}, {0xe000, 0x7fff, {0x3, 0xa373}}, {0x0, 0x1, {0x3, 0xffffff5e}}, {0x7f, 0x1000, {0x0, 0x4}}, {0x9, 0x400, {0x1, 0xffffffff}}, {0x8, 0x10c, {0x0, 0x7}}, {0x400, 0x7186, {0x1, 0x7}}, {0x400, 0x81, {0x2, 0x4}}, {0x7fff, 0x80, {0x2}}, {0x0, 0x7f, {0x0, 0x2}}, {0x8001, 0x7ed, {0x3, 0xffffffe0}}, {0x1f, 0x76e, {0x0, 0xffffff01}}, {0x6, 0x8, {0x3, 0x2}}, {0x3, 0xffd2, {0x2, 0x6}}, {0xb0, 0x7, {0x6, 0x100}}, {0xd3, 0x7, {0x3, 0x3ff}}, {0x8, 0x4, {0x3, 0x4}}, {0x3, 0x66, {0x3, 0x7}}, {0x8, 0x2, {0x2, 0x1000}}, {0x3, 0x0, {0x1, 0x1000}}, {0x0, 0xcf, {0x2, 0xfffffe01}}, {0x6, 0x65f4, {0x1, 0x6}}, {0xf73, 0x3ff, {0x0, 0x1000}}, {0x7, 0x5, {0x0, 0x8}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 19:05:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000040000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002e002f6a00000000000000000000000001000048"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) [ 755.008411][ T5161] loop4: detected capacity change from 0 to 512 [ 755.027851][ T5168] loop5: detected capacity change from 0 to 512 [ 755.034501][ T5161] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 755.044593][ T5161] EXT4-fs (loop4): group descriptors corrupted! 19:05:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000080000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f007400000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400086dd63faf836616", 0x24, 0x4200}], 0x0, &(0x7f0000013a00)) 19:05:17 executing program 1: r0 = openat(0xffffffffffffff9c,