(loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1726.594434] EXT4-fs (loop7): group descriptors corrupted! [ 1726.637941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:53:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:53:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42117, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:53:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xb00, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:53:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:53:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, r1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:53:37 executing program 5: r0 = semget(0x2, 0x0, 0x600) semop(r0, &(0x7f0000000000)=[{0x1, 0xb8f}, {0x2, 0x2, 0x800}, {0x2, 0x8}, {0x1, 0x1, 0x1800}, {0x1, 0x3ff, 0x1000}, {0x1, 0x7ff, 0x1000}], 0x6) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x3, 0x1800}, {0x4, 0x7, 0x1000}, {0x1, 0x706, 0x800}, {0x5, 0x101, 0x2000}, {0x3, 0x8, 0x1800}, {0x2, 0xed2, 0x1800}], 0x6, &(0x7f0000000080)={0x0, 0x3938700}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x2, 0x8, 0x3, 0xfffe, 0x0, 0xb497, 0x0, 0xdeb5, 0x3]) 10:53:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x62}}}}}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:53:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1736.943576] No source specified [ 1736.944561] No source specified 10:53:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1736.970563] No source specified [ 1736.971554] No source specified [ 1736.977618] loop6: detected capacity change from 0 to 118 [ 1736.985773] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (14 blocks) 10:53:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1737.006270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1737.008946] loop6: detected capacity change from 0 to 118 [ 1737.014411] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (14 blocks) [ 1737.040571] No source specified [ 1737.048195] loop7: detected capacity change from 0 to 528 [ 1737.050990] loop3: detected capacity change from 0 to 4 [ 1737.051816] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1737.052734] EXT4-fs (loop7): group descriptors corrupted! [ 1737.055602] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1737.059221] loop7: detected capacity change from 0 to 528 [ 1737.060900] loop3: detected capacity change from 0 to 4 [ 1737.063529] No source specified [ 1737.064490] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1737.065087] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1737.066379] EXT4-fs (loop7): group descriptors corrupted! 10:53:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x8c6b94780e00cfb9}, 0x6) 10:53:37 executing program 5: semget(0x2, 0x0, 0x600) r0 = semget$private(0x0, 0x4, 0x600) semctl$IPC_RMID(r0, 0x0, 0x0) 10:53:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:53:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:53:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:53:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:53:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, r1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1737.256926] loop3: detected capacity change from 0 to 4 10:53:37 executing program 5: semget(0x2, 0x0, 0x600) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x8]) 10:53:37 executing program 0: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x43c, 0x3f4, 0x800, 0x70bd28, 0x25dfdbff, {0x2, 0x3, 0x5, [0x6, 0x1, 0x311, 0x8, 0xb16, 0x20, 0x7f, 0x1a8, 0x9, 0x4, 0x9, 0x3, 0x40, 0x5f0f, 0x73a1, 0xc83, 0x5, 0x7fffffff, 0x7, 0x51, 0x7, 0x3f, 0x1, 0x2, 0x5, 0xffffff1d, 0x8, 0x3ff, 0x7ff, 0x6, 0x7fffffff, 0x1, 0x3, 0x54a13fd5, 0xe8, 0x4, 0x8, 0x1000, 0x1d2e, 0x1e, 0x5450, 0x40, 0x8, 0xbc, 0xffff, 0x9, 0x1, 0x0, 0x4a95, 0xfffffff9, 0x3ff, 0x5, 0x2, 0x3f, 0x0, 0xff, 0x5, 0x2, 0x0, 0x1, 0x7fffffff, 0x10000, 0x3, 0x407f], [0x4, 0x7ff, 0x4, 0x4, 0x1, 0x1f, 0x3c7, 0x0, 0x8000, 0x0, 0x7d44, 0x7, 0x7, 0x3, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x7b4a, 0x8, 0x7fff, 0x1abe, 0x101, 0xcac5, 0x3, 0xffff8000, 0x13, 0xd4, 0x30f42a17, 0x5, 0x9, 0x6, 0xff, 0x7, 0xffffff66, 0x8001, 0x1, 0x0, 0x7, 0x3, 0x9, 0x7, 0x1, 0x8001, 0x2f478dff, 0x3, 0x7, 0xf3cf, 0x5, 0x1000, 0x6, 0x100, 0x7ff, 0x80000001, 0x7, 0xfffffc86, 0x1f, 0x32c, 0x3, 0xfffffff9, 0xff, 0x2, 0xffff], [0x7, 0x1000, 0x5, 0x6, 0x5, 0x1, 0x88b, 0x1, 0xc424, 0x3, 0x8, 0x9, 0x1120, 0x1442, 0xbc, 0x1, 0x3f, 0x8000, 0x7, 0x7, 0x81, 0x3bc97962, 0xef7b, 0xa7, 0x1000, 0x9, 0x5, 0x8, 0x81, 0x7, 0x1ff, 0x10001, 0x0, 0x319e, 0x3f, 0x3, 0x40, 0x20, 0x20, 0x7fff, 0xc8, 0xfffff668, 0x3, 0x2, 0x7, 0x7f, 0x800, 0x1, 0x3, 0x80000000, 0x9, 0x0, 0x10000, 0x43, 0x400, 0x40, 0x6, 0x80000001, 0x610, 0x1, 0xfffffb25, 0xfff, 0x400, 0x2], [0x8, 0x80000000, 0x0, 0x3f, 0x3, 0x1d78, 0x9, 0x0, 0x8a, 0xe850, 0x1, 0x9, 0x3bc, 0x1000, 0x0, 0x7abb, 0x1f, 0x401, 0x3, 0x7fffffff, 0x3, 0x6, 0x1ff, 0x6, 0xad, 0xfff, 0x0, 0x3ff, 0x7, 0x1, 0x17e3023d, 0x1, 0x9, 0x0, 0xc6, 0x3, 0x200, 0x7fffffff, 0x200, 0x1, 0x9, 0x3, 0x9, 0x9, 0x3, 0x5, 0x8, 0x2, 0x4, 0x8000, 0xeb6, 0xb8, 0x400, 0x3, 0x62, 0x8, 0x0, 0xece7, 0x4, 0x0, 0x88, 0x200, 0x0, 0xffffffff], 0x1b, ['}\'*+\x15%\x00', '()\x00', '*\'%\xb9)\x00', '^$\x00', '-@-]+^-\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x48800}, 0x24000058) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1737.271950] loop7: detected capacity change from 0 to 530 [ 1737.281024] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1737.285595] loop6: detected capacity change from 0 to 120 [ 1737.295414] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1737.297180] EXT4-fs (loop7): group descriptors corrupted! [ 1737.304235] loop3: detected capacity change from 0 to 4 [ 1737.310491] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1737.318189] No source specified [ 1737.321705] loop7: detected capacity change from 0 to 530 [ 1737.326250] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1737.328211] No source specified [ 1737.339485] loop6: detected capacity change from 0 to 120 [ 1737.351332] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1737.352929] EXT4-fs (loop7): group descriptors corrupted! [ 1737.366690] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) 10:53:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06633c316662f76eb94c6f1b8f649cdbb88950152cfe1df3b1638246e27c35fc1a72761e6ce691fa4c7265d358f46917c450c794a8652bff3bc87ee2907881ff9e97efc3bf482650567def9ddd74b37aff9ff4686ec1c85c11809191359e88418ca7baff8d846bef911c059aa6e07cef5edf7971e1141d30843db490faa89e8b0974176044b92ba60945c4e37cb5333141233b8832e4ea5adb239be40127eb315536d970913ef0c68e00cce904526067a9f543972eef1a19e89df397b803"], 0x36) 10:53:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1737.499772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1737.586067] loop3: detected capacity change from 0 to 4 [ 1737.594968] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1737.605695] loop3: detected capacity change from 0 to 4 [ 1737.612570] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1737.620546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1740.242430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1740.245683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1740.247751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1740.253514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1740.257416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1742.277245] Bluetooth: hci1: command tx timeout [ 1744.325213] Bluetooth: hci1: command tx timeout [ 1746.373323] Bluetooth: hci1: command tx timeout [ 1748.421257] Bluetooth: hci1: command tx timeout [ 1758.996909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.998134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.043723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.044862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.198695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.507409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:54:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x20f4, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:54:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x42700, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x8, 0xfff, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48880}, 0x24004015) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x800) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:54:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06633c316662f76eb94c6f1b8f649cdbb88950152cfe1df3b1638246e27c35fc1a72761e6ce691fa4c7265d358f46917c450c794a8652bff3bc87ee2907881ff9e97efc3bf482650567def9ddd74b37aff9ff4686ec1c85c11809191359e88418ca7baff8d846bef911c059aa6e07cef5edf7971e1141d30843db490faa89e8b0974176044b92ba60945c4e37cb5333141233b8832e4ea5adb239be40127eb315536d970913ef0c68e00cce904526067a9f543972eef1a19e89df397b803"], 0x36) 10:54:10 executing program 5: r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000001400)=""/112) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)=0x1) r1 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000001400)=""/112) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000040)=""/250) semget(0x2, 0x0, 0x600) r2 = semget$private(0x0, 0x1, 0x0) r3 = semget$private(0x0, 0x3, 0x601) semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000180)=""/112) semop(r2, &(0x7f0000000140)=[{0x0, 0xc4c7, 0x800}, {0x2, 0xfffc}, {0x1, 0x400}, {0x0, 0x6, 0x1000}, {0x4, 0x5}, {0x3, 0x0, 0x1000}, {0x1, 0x1ff, 0x800}], 0x7) semget(0x1, 0x4, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r0, 0xfffffffffffffffe, 0x0) 10:54:10 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x1, 0xc0, 0xff, 0x0, 0x7, 0x10382, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x1, @perf_config_ext={0x100000001, 0x8}, 0x50c80, 0x7, 0xffff0001, 0x2, 0x100000001, 0x8, 0x6, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1d, 0x0, 0x0}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/81) 10:54:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1770.429225] loop7: detected capacity change from 0 to 531 [ 1770.451435] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1770.452050] loop3: detected capacity change from 0 to 4 [ 1770.453130] EXT4-fs (loop7): group descriptors corrupted! [ 1770.455744] loop6: detected capacity change from 0 to 122 [ 1770.458947] No source specified [ 1770.465586] No source specified [ 1770.476991] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1770.479569] loop7: detected capacity change from 0 to 531 [ 1770.487901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.488994] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1770.499061] loop3: detected capacity change from 0 to 4 [ 1770.506988] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1770.522153] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1770.523885] EXT4-fs (loop7): group descriptors corrupted! [ 1770.537676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.544060] loop6: detected capacity change from 0 to 122 10:54:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2400, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1770.559928] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) 10:54:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:10 executing program 5: semget(0x2, 0x0, 0x600) r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000001400)=""/112) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/192) 10:54:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:54:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1770.661686] loop7: detected capacity change from 0 to 543 [ 1770.665724] No source specified [ 1770.669482] No source specified [ 1770.673860] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1770.675233] EXT4-fs (loop7): group descriptors corrupted! [ 1770.730295] loop3: detected capacity change from 0 to 4 [ 1770.739266] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1770.756382] loop3: detected capacity change from 0 to 4 10:54:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x4300, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1770.771513] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1770.825507] loop6: detected capacity change from 0 to 127 [ 1770.839074] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1770.857773] loop6: detected capacity change from 0 to 127 [ 1770.869156] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1770.873989] No source specified [ 1770.879308] No source specified 10:54:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06633c316662f76eb94c6f1b8f649cdbb88950152cfe1df3b1638246e27c35fc1a72761e6ce691fa4c7265d358f46917c450c794a8652bff3bc87ee2907881ff9e97efc3bf482650567def9ddd74b37aff9ff4686ec1c85c11809191359e88418ca7baff8d846bef911c059aa6e07cef5edf7971e1141d30843db490faa89e8b0974176044b92ba60945c4e37cb5333141233b8832e4ea5adb239be40127eb315536d970913ef0c68e00cce904526067a9f543972eef1a19e89df397b803"], 0x36) 10:54:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform', 0x484e00, 0x95) r2 = accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80800) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000140)={0x3, 0x1, {0x20, @usage=0x3, 0x0, 0xbc6, 0xffffffffffffffe0, 0xe9ce, 0x1, 0x0, 0x20, @struct={0x8, 0x7fffffff}, 0xb68e, 0xfffffffa, [0x0, 0x0, 0x1, 0x9, 0x2, 0x7f]}, {0x6, @struct={0x3}, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x80000000, 0xfffffffffffff801, 0x86, @usage, 0x0, 0x7fff, [0xa0f, 0x8, 0x80, 0x8, 0x4a, 0x3]}, {0x7, @struct={0x1, 0x4}, 0x0, 0xffffffffffffffff, 0x20, 0x7, 0xffff, 0x1f, 0x0, @usage=0x80000001, 0x2, 0xe4, [0x20, 0x64, 0x3f, 0x4, 0xffff, 0x1f]}, {0x0, 0x5, 0x4}}) ioctl$KDSETLED(r1, 0x4b32, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) copy_file_range(0xffffffffffffffff, &(0x7f00000005c0)=0x6, 0xffffffffffffffff, &(0x7f0000000600)=0xc, 0xffff, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x40) fcntl$dupfd(r0, 0x0, r3) 10:54:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x194, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xfe, 0x2a, [@fast_bss_trans={0x37, 0xc0, {0x2, 0x6, "4aca10c28da310389ba099d40759dca3", "22824da50afd53c81c20b47f6cf3d721a09c69a37865b9d87d2f830bed882048", "f82f18d3eb1dbca0edb575540e208b76ca1e5c3d32da1e411a01c0c81054a4cb", [{0x2, 0x1a, "38ff99d81dafb3f58ad91f077ee2a1fa5e4b35d5ec7dff0e2a67"}, {0x3, 0x27, "c6654b4e16c8c7dfab0cebf04e787060875a17062fac2aa7fb6d93fc5c6b2c745861caab1047ee"}, {0x4, 0x12, "79f323efd1a9473acc8db6065f851b3c1af5"}, {0x3, 0x8, "c2eed03f73127156"}, {0x2, 0x1, 'R'}, {0x4, 0x6, "32c8d9d2674c"}]}}, @gcr_ga={0xbd, 0x6}, @peer_mgmt={0x75, 0x16, {0x0, 0x8000, @void, @val=0x10, @val="229f0e823a42db47859cb032e25d65ae"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x7, @val=0x8, @void, @val="7426ca4de6f101adf095fe7a67824aa7"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_IE={0x2c, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x2, 0x5, 0x0, {0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x0, 0x6}}, @perr={0x84, 0x2, {0x5}}, @cf={0x4, 0x6, {0x3, 0xff, 0xe12, 0x80}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x194}, 0x1, 0x0, 0x0, 0x44080}, 0x8085) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="2577d1c40189937225af1b"], 0x36) 10:54:20 executing program 5: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/61, 0x3d) r0 = semget(0x1, 0x1, 0x85) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000000)=""/207) semget(0x2, 0x0, 0xc) 10:54:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc2, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x4500, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1780.497321] No source specified [ 1780.499588] No source specified [ 1780.500684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:54:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1780.533072] loop6: detected capacity change from 0 to 127 [ 1780.534444] loop7: detected capacity change from 0 to 544 10:54:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x4000001) r3 = semget(0x2, 0x0, 0x600) semop(r3, &(0x7f0000000000)=[{0x0, 0x9, 0x1800}, {0x0, 0x3, 0x800}, {0x0, 0x0, 0x1800}, {0x1, 0x8e7, 0x1000}, {0x0, 0x5, 0x1800}], 0x5) [ 1780.550433] loop3: detected capacity change from 0 to 4 [ 1780.556546] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1780.557952] EXT4-fs (loop7): group descriptors corrupted! [ 1780.558060] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1780.564785] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1780.575530] loop3: detected capacity change from 0 to 4 [ 1780.578078] No source specified [ 1780.581005] No source specified [ 1780.584296] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1780.587432] loop6: detected capacity change from 0 to 127 [ 1780.588579] loop7: detected capacity change from 0 to 544 [ 1780.608289] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1780.609862] EXT4-fs (loop7): group descriptors corrupted! [ 1780.613489] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (15 blocks) 10:54:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0xd7, &(0x7f0000000080)="0f0f63b5e16f50d92d8e1403752d8c0e2c9793df2c3e51b7d78c4f271e4e53bf31664ed97e84b3b6a542e8af4025a389d90735213fa8a4d98a23dedc7303956e9996e3a63eae21394d73b91ff0f5ff1863ee979cc506b388607f64c099bc099d9c28ac6e72b317bc26dc015f18f9a663552ebecaf44d975811abef251abf7995966c9a0add8fce53adb73c8d4a2778d599a3d303822daa2d78445f17efb16e540c044bfa50bfc1b3464033d9a4ee618e4f8441eb5b76b759a20949afc6530b5152583156b5d2e9dcf6c571b2b6376de3d3c0621f9a9f62", 0xa0, 0x0, &(0x7f0000000180)="b91966b1bdc45506677fb04efd12a8e311d96dd04b82b1d90ea7d47243082a26a5e48127048a23a84015fa3d602b888d36fed5f599c22698a89d9b30d3b4701a0ce378cbad374002534dfc9d8ec6305f13f744bfeca8fe053abe073458f1fa892c29d9a587052c37755faf2bc12edcac1ce7028321409f2a52adc26fd9bed29327e3534e84cc312f2b36643a7d2e0421352d08ead8550ca3d2a5ae339bb9771e"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000440)={0x0, 0x8, @start={0x0, 0x1, "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", "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"}, [0xf31, 0x200, 0x57, 0x971, 0x7ff, 0xbb88, 0x8001, 0x2, 0x400, 0x10000, 0xe000000000000000, 0x1, 0x7, 0x380000000000000, 0x3, 0x47, 0x8, 0x0, 0x8, 0x7, 0x5, 0x3c3, 0x4c02, 0x3, 0x1, 0x3, 0x7f, 0x941, 0x42, 0x100000000, 0x7, 0xffff, 0x80000000, 0x7, 0xfffffffffffffffb, 0x3, 0xff, 0x7, 0x1, 0x0, 0x9, 0x2, 0x3, 0x5fa, 0x80000000, 0x1, 0x7, 0x80000000, 0x1, 0x1ff, 0x80000000, 0x8001, 0x7f, 0x80000000, 0x61f, 0x10, 0x8, 0x9, 0x3f, 0x100000000, 0x2, 0x9, 0x2, 0x7]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000e80)={r1, "e88515738c4a3ef0001063d62406d1c7"}) [ 1780.615862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:54:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf420, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1780.666908] No source specified [ 1780.669253] No source specified 10:54:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:54:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44300, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1d98e, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1780.752289] loop3: detected capacity change from 0 to 4 [ 1780.758227] No source specified [ 1780.759233] No source specified [ 1780.763786] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1780.779763] loop3: detected capacity change from 0 to 4 [ 1780.783502] loop6: detected capacity change from 0 to 236 [ 1780.792617] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (29 blocks) [ 1780.795239] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1780.802008] loop6: detected capacity change from 0 to 236 [ 1780.812264] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (29 blocks) [ 1780.812567] loop7: detected capacity change from 0 to 545 [ 1780.836406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.860847] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1780.862357] EXT4-fs (loop7): group descriptors corrupted! [ 1780.890999] loop7: detected capacity change from 0 to 545 [ 1780.901696] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1780.903272] EXT4-fs (loop7): group descriptors corrupted! [ 1783.443079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1783.447652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1783.449682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1783.454549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1783.457711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1785.478237] Bluetooth: hci4: command tx timeout [ 1787.526477] Bluetooth: hci4: command tx timeout [ 1789.573207] Bluetooth: hci4: command tx timeout [ 1791.621200] Bluetooth: hci4: command tx timeout [ 1800.563771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.564929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.601029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.602481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:54:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:54:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:54:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000df969309f8b7f2c1009a42355812ff99248039db4f591cb44d89025f62ab68acac37348e8af0e9a0df370d88bfc4dea4815eb14d5a6998f39650abb170114afa77d6ce4411e3f129948777d326d08c49f21ddb7f42c6db672ff450bd77b104b489326435635673c415e2845e3b765565e63ba608f9c9151e4f011e4739536f87f213772e"], 0x36) 10:54:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc4, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x45301, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:54:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:54:50 executing program 5: semget(0x2, 0x0, 0x600) r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000001400)=""/112) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000040)=""/97) r1 = semget$private(0x0, 0x1, 0x0) r2 = semget$private(0x0, 0x0, 0x20) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000001400)=""/112) semctl$IPC_RMID(r2, 0x0, 0x0) semop(r1, &(0x7f0000000000)=[{0x2, 0x101, 0x1400}, {0x4, 0xfff}, {0x4, 0x3, 0x1800}, {0x0, 0x2, 0x800}, {0x3, 0x6, 0x1800}, {0x2, 0xfffb, 0x800}, {0x1, 0x3, 0x1000}], 0x7) [ 1809.873704] No source specified [ 1809.875966] No source specified [ 1809.879409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.889803] loop6: detected capacity change from 0 to 512 [ 1809.894115] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1809.894832] EXT4-fs (loop6): group descriptors corrupted! [ 1809.902422] loop6: detected capacity change from 0 to 512 10:54:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1809.905691] loop7: detected capacity change from 0 to 553 [ 1809.906726] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1809.907555] EXT4-fs (loop6): group descriptors corrupted! [ 1809.910656] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1809.911516] EXT4-fs (loop7): group descriptors corrupted! [ 1809.929682] loop7: detected capacity change from 0 to 553 [ 1809.939551] loop3: detected capacity change from 0 to 4 [ 1809.940868] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1809.941603] EXT4-fs (loop7): group descriptors corrupted! 10:54:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) readahead(r0, 0x101, 0x0) 10:54:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1809.958594] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1809.979476] loop3: detected capacity change from 0 to 4 [ 1809.993561] EXT4-fs (loop3): Can't read superblock on 2nd try 10:54:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x45501, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1810.009072] loop6: detected capacity change from 0 to 1024 [ 1810.020058] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1810.020848] EXT4-fs (loop6): group descriptors corrupted! [ 1810.026131] No source specified [ 1810.026510] loop6: detected capacity change from 0 to 1024 [ 1810.033335] No source specified [ 1810.038194] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1810.038924] EXT4-fs (loop6): group descriptors corrupted! 10:54:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06633c316662f76eb94c6f1b8f649cdbb88950152cfe1df3b1638246e27c35fc1a72761e6ce691fa4c7265d358f46917c450c794a8652bff3bc87ee2907881ff9e97efc3bf482650567def9ddd74b37aff9ff4686ec1c85c11809191359e88418ca7baff8d846bef911c059aa6e07cef5edf7971e1141d30843db490faa89e8b0974176044b92ba60945c4e37cb5333141233b8832e4ea5adb239be40127eb315536d970913ef0c68e00cce904526067a9f543972eef1a19e89df397b803"], 0x36) [ 1810.054789] loop7: detected capacity change from 0 to 554 [ 1810.070957] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1810.071770] EXT4-fs (loop7): group descriptors corrupted! [ 1810.094792] loop7: detected capacity change from 0 to 554 10:54:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1810.112056] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1810.112906] EXT4-fs (loop7): group descriptors corrupted! [ 1810.187666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.195031] loop3: detected capacity change from 0 to 4 [ 1810.202185] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1810.208777] loop3: detected capacity change from 0 to 4 [ 1810.214008] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06633c316662f76eb94c6f1b8f649cdbb88950152cfe1df3b1638246e27c35fc1a72761e6ce691fa4c7265d358f46917c450c794a8652bff3bc87ee2907881ff9e97efc3bf482650567def9ddd74b37aff9ff4686ec1c85c11809191359e88418ca7baff8d846bef911c059aa6e07cef5edf7971e1141d30843db490faa89e8b0974176044b92ba60945c4e37cb5333141233b8832e4ea5adb239be40127eb315536d970913ef0c68e00cce904526067a9f543972eef1a19e89df397b803"], 0x36) 10:55:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:55:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:00 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x69) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001c40)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="01000080000000002e2f66696c653000"]) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001c80), 0x7, 0x8800) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/97, 0x61}], 0x2, &(0x7f0000004540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="1f725e00000000000059c7", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000450100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x138}}], 0x1, 0x40002000, &(0x7f0000002040)={0x0, 0x3938700}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r10) getgroups(0x1, &(0x7f0000002080)=[0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0)={0x0}, &(0x7f0000002100)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="6366c469fdc6ad7c9992d6135837e0af5f0c8a1de4a1020a3d31adda3ae4463aa01830", 0x23}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3], 0x48, 0x4}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000380)="ca9c4f7d5e438ad1f5abe3dcd97ed014a6169503d9", 0x15}, {&(0x7f00000003c0)="93cfae9ae4b5c828c2", 0x9}, {&(0x7f0000000440)="ddfdb473", 0x4}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="45315034c55c8d4605aa1375066316f7c410007d87d2df7064065b0e8cb5b5f62224fcc19f1753c7fba600f6e4c472084df4cce1611edbbeded29763cbc8f9c7c211d6d4a46b427a304d92c0f920f46f1a751fc8d92bf18c67646b80685addb2daf1", 0x62}, {&(0x7f0000000540)="7dac20dc9e090206fd5a6b95062231192de56fe5e20e352578abb261bd34411a5f6e2659ddf320cb09350e54fbe13f40db66fd0d396712ae95de78ab37de2a04ca5ebd24f265b9ca2c3a42293bed455b7844ef81d2f794089c57e45aabc192132c2be679cf6154f56e9a5ef96f31881900baa18e6e09d99dad6dbe7e436eea26ed96b2b2429a057dcac42d5610828f08d437c9f7faad1172af323c6ee497bce9028a41b535db5ffe9ab0618a26e936c232ec7fc1fd0a8f7c611d31a80f4572e9df5c4c5b731b8c3b41", 0xc9}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="ea431534d1dc902b2fc5c58df256d9949667d42765df97a75196ee1c4832d170ace9cebaebcb3aa6f765e2b3e703b85368b92f294f7569aeb3ae09f65d9b4abff982cd75cdf2fd6b2102f80cb86fee0c44c1bc8bf937735c73c656ad17193c90aba6c92fba9745d5d31a3e6e4e8d8fc65b00278d0e7d91065c6e9e1f1317d2fa5dbd472e97114c84343d142e16d82f24b95724fa531722811e389eb8c87542cc58a4585a93df92c0951d435fc2a67fd92523b2d2979ef9ec6a47d01ce2c841cf1c2a672a8f782bb65ba894a796ff8c75f7d010c1024132aa9b8df54580c8716e5ff5063d85f3883c95ab670617467d9c9f2c0d3be12b", 0xf6}, {&(0x7f0000001740)="31e0ba406db0386ac06096b52adf2a5bdecc9f307a67a64cc10d318b4a45bd9bda426d1753cedc1b67cdbd24f8348806b8cdc3e3545d8c8ae2e4ec0862a8af0f20f48fb922d09c2278b11e2dde3de3bcbec4053819f6deebf08c05875cd22ace347d69cad7ff6301ac947ee2ca4f6e1535ee4581963aadc80fb86ae2d08678134ff0d3536ebbed3e65805bd0761d2ad7db0a8f8f1c93c5d2a1aad178df75766ad8c5204769eff232291358652b883170fa879740e3e6484d76", 0xb9}], 0x9, 0x0, 0x0, 0x4004841}}, {{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)="f70276986ac8526d79ebf6b643c91f3254aadaf81a4b24f72760bb8b695a464b171d281fea516e7f424a873e0833f60e215a338c0de02c82073144ada6fb6aab6898ccce3d864a67d5ce3b720c0361fb42ecb1814197c9f4cc52f5e2e4c6b44048510bfa9a51870fcdc1182373ae6c8ed4b0769b3eb93da631d14275795cdd911f383968950fe02201245ee2188701f093c270bfa36c95cbd6d4fa5e7972a105045236785307e79696caa3351d777eddf502d7d60cc223a76d8fcfd03925d0d9e0d2682ad9dc8d489f1678c4764a977963e57d8f367633b4efb40c8fd9", 0xdd}, {&(0x7f0000001a40)="c6a89fb07d7491ef17a54d07ccc3736ba9f3414a3528574924d987b2b0c94a3e797c7c585d2c982df5b2b195033fc084f126194fc88e82a992733e0dd8c4e858d00c73503ae7a4c85082f49b1e2af0648f77dfce9ec377913115e22538f59e3ede3e3dfccdddfc56ea31c0bcd95d561240102fcc5ab27d1a7797d07da4b79eeef1886c79f2b0f6bffb09d8e86a205c60a74f69517837f1b31d09a343d087679e6e8ff1e44c7724fd07c8866d54a3b7bb5dbe69b3cf3b5ca22f32afa827d622db3201d9c48e8088fd9893f8f39201785ad2c7358bd5e091ca7b82d306decc869ed285bbf9a6a9e59c588cbcae0d1de18e9de50a8120b8c8", 0xf7}, {&(0x7f0000001b40)="9ed496a118ccf7cdaf558e9a78e0486d96d7df489d30e50c2a36eb2a3ca1a781881e8e44d7c25b7c47af052366bdca80aafecfdba02649080c99ec22fe3ad8c62b900a79aa9949126e823ebbc1acbcead96a950934e2df684d573683341a5bc009e23a6f9575574b1d41c9e8c1c30a6635a41308d0faa71fc86e373e8b80706ee87b48203a4e15b7a89994ac1ff6066d4d1447c3e9f299cc8087c517a71e1fb6954143b16b", 0xa5}], 0x3, &(0x7f0000002140)=[@rights={{0x18, 0x1, 0x1, [r0, r4]}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x4000}}], 0x3, 0x80004) 10:55:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="10000300000006c5380108"], 0x36) [ 1820.147756] loop7: detected capacity change from 0 to 560 [ 1820.151955] loop6: detected capacity change from 0 to 1536 [ 1820.167692] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1820.169161] EXT4-fs (loop7): group descriptors corrupted! [ 1820.179333] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1820.180810] EXT4-fs (loop6): group descriptors corrupted! [ 1820.186915] loop3: detected capacity change from 0 to 4 [ 1820.197898] No source specified [ 1820.198390] loop7: detected capacity change from 0 to 560 [ 1820.202942] loop6: detected capacity change from 0 to 1536 [ 1820.207180] No source specified [ 1820.211431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1820.215755] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1820.217398] EXT4-fs (loop7): group descriptors corrupted! [ 1820.218903] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1820.221674] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1820.223206] EXT4-fs (loop6): group descriptors corrupted! [ 1820.254029] loop3: detected capacity change from 0 to 4 [ 1820.263685] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x47201, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1820.310479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x80, 0x0, 0x0, 0x0, 0x6, 0x81600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0xff, 0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) 10:55:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1820.432412] No source specified [ 1820.442663] No source specified [ 1820.450961] loop7: detected capacity change from 0 to 569 [ 1820.455723] loop6: detected capacity change from 0 to 1792 10:55:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1820.487888] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1820.489465] EXT4-fs (loop6): group descriptors corrupted! [ 1820.495656] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1820.497323] EXT4-fs (loop7): group descriptors corrupted! [ 1820.525612] loop7: detected capacity change from 0 to 569 [ 1820.526357] loop6: detected capacity change from 0 to 1792 [ 1820.544878] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1820.546680] EXT4-fs (loop7): group descriptors corrupted! [ 1820.553042] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1820.554497] EXT4-fs (loop6): group descriptors corrupted! [ 1820.564673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1820.569893] loop3: detected capacity change from 0 to 4 [ 1820.595410] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffd81, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1820.614638] loop3: detected capacity change from 0 to 4 [ 1820.632291] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1820.733308] No source specified [ 1820.737531] No source specified [ 1820.823458] loop7: detected capacity change from 0 to 632 [ 1820.841312] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1820.842978] EXT4-fs (loop7): group descriptors corrupted! [ 1820.866914] loop7: detected capacity change from 0 to 632 [ 1820.876246] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1820.877851] EXT4-fs (loop7): group descriptors corrupted! 10:55:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:12 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x69) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001c40)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="01000080000000002e2f66696c653000"]) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001c80), 0x7, 0x8800) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/97, 0x61}], 0x2, &(0x7f0000004540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="1f725e00000000000059c7", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000450100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x138}}], 0x1, 0x40002000, &(0x7f0000002040)={0x0, 0x3938700}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r10) getgroups(0x1, &(0x7f0000002080)=[0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0)={0x0}, &(0x7f0000002100)=0xc) [ 1832.590386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.601275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="6366c469fdc6ad7c9992d6135837e0af5f0c8a1de4a1020a3d31adda3ae4463aa01830", 0x23}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3], 0x48, 0x4}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000380)="ca9c4f7d5e438ad1f5abe3dcd97ed014a6169503d9", 0x15}, {&(0x7f00000003c0)="93cfae9ae4b5c828c2", 0x9}, {&(0x7f0000000440)="ddfdb473", 0x4}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="45315034c55c8d4605aa1375066316f7c410007d87d2df7064065b0e8cb5b5f62224fcc19f1753c7fba600f6e4c472084df4cce1611edbbeded29763cbc8f9c7c211d6d4a46b427a304d92c0f920f46f1a751fc8d92bf18c67646b80685addb2daf1", 0x62}, {&(0x7f0000000540)="7dac20dc9e090206fd5a6b95062231192de56fe5e20e352578abb261bd34411a5f6e2659ddf320cb09350e54fbe13f40db66fd0d396712ae95de78ab37de2a04ca5ebd24f265b9ca2c3a42293bed455b7844ef81d2f794089c57e45aabc192132c2be679cf6154f56e9a5ef96f31881900baa18e6e09d99dad6dbe7e436eea26ed96b2b2429a057dcac42d5610828f08d437c9f7faad1172af323c6ee497bce9028a41b535db5ffe9ab0618a26e936c232ec7fc1fd0a8f7c611d31a80f4572e9df5c4c5b731b8c3b41", 0xc9}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="ea431534d1dc902b2fc5c58df256d9949667d42765df97a75196ee1c4832d170ace9cebaebcb3aa6f765e2b3e703b85368b92f294f7569aeb3ae09f65d9b4abff982cd75cdf2fd6b2102f80cb86fee0c44c1bc8bf937735c73c656ad17193c90aba6c92fba9745d5d31a3e6e4e8d8fc65b00278d0e7d91065c6e9e1f1317d2fa5dbd472e97114c84343d142e16d82f24b95724fa531722811e389eb8c87542cc58a4585a93df92c0951d435fc2a67fd92523b2d2979ef9ec6a47d01ce2c841cf1c2a672a8f782bb65ba894a796ff8c75f7d010c1024132aa9b8df54580c8716e5ff5063d85f3883c95ab670617467d9c9f2c0d3be12b", 0xf6}, {&(0x7f0000001740)="31e0ba406db0386ac06096b52adf2a5bdecc9f307a67a64cc10d318b4a45bd9bda426d1753cedc1b67cdbd24f8348806b8cdc3e3545d8c8ae2e4ec0862a8af0f20f48fb922d09c2278b11e2dde3de3bcbec4053819f6deebf08c05875cd22ace347d69cad7ff6301ac947ee2ca4f6e1535ee4581963aadc80fb86ae2d08678134ff0d3536ebbed3e65805bd0761d2ad7db0a8f8f1c93c5d2a1aad178df75766ad8c5204769eff232291358652b883170fa879740e3e6484d76", 0xb9}], 0x9, 0x0, 0x0, 0x4004841}}, {{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)="f70276986ac8526d79ebf6b643c91f3254aadaf81a4b24f72760bb8b695a464b171d281fea516e7f424a873e0833f60e215a338c0de02c82073144ada6fb6aab6898ccce3d864a67d5ce3b720c0361fb42ecb1814197c9f4cc52f5e2e4c6b44048510bfa9a51870fcdc1182373ae6c8ed4b0769b3eb93da631d14275795cdd911f383968950fe02201245ee2188701f093c270bfa36c95cbd6d4fa5e7972a105045236785307e79696caa3351d777eddf502d7d60cc223a76d8fcfd03925d0d9e0d2682ad9dc8d489f1678c4764a977963e57d8f367633b4efb40c8fd9", 0xdd}, {&(0x7f0000001a40)="c6a89fb07d7491ef17a54d07ccc3736ba9f3414a3528574924d987b2b0c94a3e797c7c585d2c982df5b2b195033fc084f126194fc88e82a992733e0dd8c4e858d00c73503ae7a4c85082f49b1e2af0648f77dfce9ec377913115e22538f59e3ede3e3dfccdddfc56ea31c0bcd95d561240102fcc5ab27d1a7797d07da4b79eeef1886c79f2b0f6bffb09d8e86a205c60a74f69517837f1b31d09a343d087679e6e8ff1e44c7724fd07c8866d54a3b7bb5dbe69b3cf3b5ca22f32afa827d622db3201d9c48e8088fd9893f8f39201785ad2c7358bd5e091ca7b82d306decc869ed285bbf9a6a9e59c588cbcae0d1de18e9de50a8120b8c8", 0xf7}, {&(0x7f0000001b40)="9ed496a118ccf7cdaf558e9a78e0486d96d7df489d30e50c2a36eb2a3ca1a781881e8e44d7c25b7c47af052366bdca80aafecfdba02649080c99ec22fe3ad8c62b900a79aa9949126e823ebbc1acbcead96a950934e2df684d573683341a5bc009e23a6f9575574b1d41c9e8c1c30a6635a41308d0faa71fc86e373e8b80706ee87b48203a4e15b7a89994ac1ff6066d4d1447c3e9f299cc8087c517a71e1fb6954143b16b", 0xa5}], 0x3, &(0x7f0000002140)=[@rights={{0x18, 0x1, 0x1, [r0, r4]}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x4000}}], 0x3, 0x80004) 10:55:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x68a6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:55:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:55:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0x3}, @broadcast}, 0x10) [ 1832.628566] loop6: detected capacity change from 0 to 2048 [ 1832.641852] loop7: detected capacity change from 0 to 634 [ 1832.649709] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1832.651330] EXT4-fs (loop6): group descriptors corrupted! 10:55:12 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x5, 0x80, 0x7, 0x3, 0x3, 0xc4, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140)}, 0x6010, 0x8, 0x7fffffff, 0x2, 0x8000, 0x6, 0x7ff, 0x0, 0x80000001, 0x0, 0x3f}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x74, 0x81, 0x3f, 0x9, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x43a0, 0x2, @perf_config_ext={0xdc2, 0xe79}, 0x8000, 0x5, 0x7, 0x1, 0x4, 0x7fffffff, 0x0, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffe1, r0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1, 0x81, 0x5, 0x4, 0x0, 0xdb, 0x2008, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x11190, 0x3, 0x1, 0x6, 0x3, 0xc7, 0x7, 0x0, 0x5, 0x0, 0x4}, r4, 0x10, r5, 0xa) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x8688c000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) [ 1832.658574] No source specified [ 1832.670365] loop3: detected capacity change from 0 to 4 [ 1832.678585] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1832.679947] EXT4-fs (loop7): group descriptors corrupted! [ 1832.686374] No source specified [ 1832.687515] loop6: detected capacity change from 0 to 2048 [ 1832.691052] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1832.712982] loop7: detected capacity change from 0 to 634 [ 1832.713660] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1832.715143] EXT4-fs (loop6): group descriptors corrupted! [ 1832.719483] loop3: detected capacity change from 0 to 4 [ 1832.734509] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1832.735973] EXT4-fs (loop7): group descriptors corrupted! [ 1832.737062] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:13 executing program 5: semget(0x2, 0x0, 0x600) semget(0x0, 0x2, 0x258) 10:55:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4f801, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1832.874019] No source specified [ 1832.877572] No source specified [ 1832.895864] loop6: detected capacity change from 0 to 8192 [ 1832.918367] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1832.919914] EXT4-fs (loop6): group descriptors corrupted! [ 1832.935641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1832.964979] loop3: detected capacity change from 0 to 4 [ 1832.969220] loop7: detected capacity change from 0 to 636 [ 1832.987659] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1833.001272] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1833.002731] EXT4-fs (loop7): group descriptors corrupted! [ 1833.007939] loop3: detected capacity change from 0 to 4 [ 1833.024571] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1833.027655] loop7: detected capacity change from 0 to 636 [ 1833.049152] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1833.050451] EXT4-fs (loop7): group descriptors corrupted! [ 1833.083455] No source specified [ 1833.087725] No source specified 10:55:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4feff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x8d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r6, r7) connect$unix(r8, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x24004840) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x2c}}}}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r9, r10) connect$unix(r11, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) fchmodat(r11, &(0x7f0000000040)='./file0\x00', 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x68, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3aa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x73b8afa531893384}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x4}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="87f8219280da8122d0b6ddc49240ab035a17d029"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x0) 10:55:22 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) clock_gettime(0x5, &(0x7f00000046c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000002d80)={[0x9]}, &(0x7f0000004840), &(0x7f0000004200), 0x8) perf_event_open(&(0x7f0000002980)={0x4, 0x80, 0xbc, 0x6, 0x5, 0x3, 0x0, 0x7, 0x48000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1e, 0x4, @perf_config_ext={0x6, 0x20}, 0xa22a, 0x100000001, 0x3, 0x2, 0x10001, 0x800, 0xa, 0x0, 0xffffff6c, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x1) recvmmsg$unix(r0, &(0x7f0000004580)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/181, 0xb5}, {&(0x7f0000004740)=""/196, 0xc4}, {&(0x7f0000001380)=""/231, 0xe7}], 0x4}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000001600)=""/234, 0xea}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/128, 0x80}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/207, 0xcf}], 0x6, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000048c0), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002b00)=""/11, 0xb}, {&(0x7f0000002b40)=""/61, 0x3d}], 0x2, &(0x7f0000002bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002d00)=@abs, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000003e00), 0x6e, &(0x7f0000004400)=[{&(0x7f0000003e80)=""/193, 0xc1}, {&(0x7f0000003f80)=""/139, 0x8b}, {&(0x7f0000004040)=""/198, 0xc6}, {&(0x7f0000004140)=""/176, 0xb0}, {&(0x7f0000004200)}, {&(0x7f0000004240)=""/210, 0xd2}, {&(0x7f0000004340)=""/91, 0x5b}, {&(0x7f00000043c0)=""/38, 0x26}], 0x8, &(0x7f0000004940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="0200008d2c3a81000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYRES32], 0xc8}}], 0x5, 0x3, &(0x7f0000004700)={r1, r2+60000000}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x9, 0xad, 0x40, 0x0, 0x3ff, 0x10, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x120, 0x7ff, 0x6, 0x6, 0x97, 0x7, 0x5, 0x0, 0x81, 0x0, 0x4f}, 0x0, 0xd, r0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) kcmp(0x0, 0x0, 0x4, r6, r3) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000001300)={0x7, 'dummy0\x00', {0x8}, 0x82}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001340)={0x7f7}, 0x4) 10:55:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1842.148055] loop7: detected capacity change from 0 to 639 [ 1842.148945] No source specified [ 1842.156437] No source specified [ 1842.163193] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1842.163926] EXT4-fs (loop7): group descriptors corrupted! [ 1842.174727] loop7: detected capacity change from 0 to 639 [ 1842.182046] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1842.182757] EXT4-fs (loop7): group descriptors corrupted! [ 1842.182939] loop3: detected capacity change from 0 to 4 [ 1842.194550] loop6: detected capacity change from 0 to 28799 [ 1842.204137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1842.214573] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1842.220961] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1842.222609] EXT4-fs (loop6): group descriptors corrupted! 10:55:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4fffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1842.244572] loop3: detected capacity change from 0 to 4 [ 1842.253652] No source specified [ 1842.256384] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1842.257675] loop6: detected capacity change from 0 to 28799 [ 1842.258178] No source specified [ 1842.276185] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1842.277642] EXT4-fs (loop6): group descriptors corrupted! [ 1842.279139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1842.282175] loop7: detected capacity change from 0 to 639 [ 1842.297317] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1842.298035] EXT4-fs (loop7): group descriptors corrupted! 10:55:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xb000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:22 executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x3f, 0x0, 0xb9}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:55:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1842.364234] No source specified [ 1842.364989] No source specified 10:55:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:55:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1842.414052] loop7: detected capacity change from 0 to 2048 10:55:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1842.438589] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1842.439385] EXT4-fs (loop7): group descriptors corrupted! [ 1842.456769] loop3: detected capacity change from 0 to 4 [ 1842.464778] No source specified [ 1842.467377] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1842.469300] No source specified [ 1842.477325] loop3: detected capacity change from 0 to 4 [ 1842.478307] loop6: detected capacity change from 0 to 30847 [ 1842.481320] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1842.489172] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1842.489872] EXT4-fs (loop6): group descriptors corrupted! 10:55:22 executing program 0: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1842.505851] loop6: detected capacity change from 0 to 30847 [ 1842.527492] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1842.528349] EXT4-fs (loop6): group descriptors corrupted! [ 1842.609036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x55) 10:55:30 executing program 0: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="7f787f404353eba7a6343b83075297ce3ada849ee3ef01130adca8479f5768f95069634cd1691339683190fd7a1bf0a08fb847187dafcfabf8aed7861ec893a26c51223d285c87c5631e34445350fd45355c979b8b73ad37096e7cef07d41a31ef721151b5b9baa432513e1fbce57f5a5c789d8516ec857b5f36d22e4b2145bf45c92dd2fd7f71f024f992e789eb80a77d556084dd47b84b990d9117825da96324fa33752e6ceb4f869d60bf1f51da8fc2dc530917788832c0bce5350a15fcd1923b54598a11432587fec83f926048e612da904e7494248f10cbc9d99eacf6bdfd", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf251b0000000400cc00080001004a0000000700210062620000"], 0x28}, 0x1, 0x0, 0x0, 0x240400a1}, 0x14) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0xff, 0x79, 0x7, 0x0, 0xffffffffffffff7f, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff, 0x401}, 0x19001, 0x9, 0x9, 0x4, 0xb70, 0x0, 0x8, 0x0, 0x400, 0x0, 0x101}, r1, 0xc, r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="be61", 0xffeb}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev}}}], 0x20}}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000200)=0xe8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="be61", 0xffeb}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev}}}], 0x20}}], 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="be61", 0xffeb}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev}}}], 0x20}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x81, 0x19cbc30, 0x0, @loopback, @empty, 0x0, 0x7, 0x71, 0xffff0001}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x5cc, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x7, 0x7, 0x1000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xff, 0x1, 0x6, 0xe9}, {0x0, 0xff, 0x9, 0x8}, {0x7, 0x81, 0x5, 0x1f}, {0xd7b, 0x0, 0x2}, {0x5, 0x4, 0x80, 0x8}, {0x7, 0x1, 0x3, 0x8}, {0x8, 0xff, 0x9, 0x2fca}, {0x80, 0x5, 0x4, 0x6}, {0x401, 0x3, 0x6, 0xfff}, {0x9, 0x7, 0x7f, 0x3}]}}}]}}, {{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9be9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6e}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) 10:55:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x68, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3aa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x73b8afa531893384}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x4}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="87f8219280da8122d0b6ddc49240ab035a17d029"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x0) 10:55:30 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1850.600453] loop3: detected capacity change from 0 to 4 [ 1850.601761] No source specified [ 1850.603684] No source specified [ 1850.608775] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1850.613282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1850.617535] loop7: detected capacity change from 0 to 32768 [ 1850.618434] loop3: detected capacity change from 0 to 4 [ 1850.625763] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1850.631005] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1850.631599] loop6: detected capacity change from 0 to 32768 [ 1850.631775] EXT4-fs (loop7): group descriptors corrupted! 10:55:30 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1850.657226] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1850.658601] EXT4-fs (loop6): group descriptors corrupted! [ 1850.660773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1850.667660] loop7: detected capacity change from 0 to 32768 10:55:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1850.681329] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1850.682074] EXT4-fs (loop7): group descriptors corrupted! [ 1850.702276] No source specified [ 1850.706666] loop6: detected capacity change from 0 to 32768 [ 1850.708342] No source specified 10:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1850.717237] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1850.718813] EXT4-fs (loop6): group descriptors corrupted! [ 1850.731659] loop3: detected capacity change from 0 to 4 [ 1850.743607] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:30 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x24000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x64020000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1850.818242] No source specified [ 1850.821371] No source specified [ 1850.829974] loop6: detected capacity change from 0 to 65536 [ 1850.833312] loop7: detected capacity change from 0 to 264192 [ 1850.839406] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1850.840186] EXT4-fs (loop6): group descriptors corrupted! [ 1850.852261] loop6: detected capacity change from 0 to 65536 [ 1850.856824] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1850.857564] EXT4-fs (loop6): group descriptors corrupted! 10:55:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1850.886947] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1850.888396] EXT4-fs (loop7): group descriptors corrupted! [ 1850.930495] loop7: detected capacity change from 0 to 264192 [ 1850.934648] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1850.935424] EXT4-fs (loop7): group descriptors corrupted! [ 1851.007553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:40 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x43000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x68, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3aa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x73b8afa531893384}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x4}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="87f8219280da8122d0b6ddc49240ab035a17d029"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x0) 10:55:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:40 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x77020000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffc7a, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x800) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c030000", @ANYRES16=r4, @ANYRESOCT=r1], 0x34c}, 0x1, 0x0, 0x0, 0x40000}, 0x44012) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x0, 0x25dfdbff, {{0x19}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x50}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x20000805) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="506804037748d6bfe60108"], 0x36) 10:55:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1860.452842] No source specified [ 1860.456699] No source specified [ 1860.471992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1860.482459] loop3: detected capacity change from 0 to 6 [ 1860.488367] loop6: detected capacity change from 0 to 98304 10:55:40 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x45000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1860.499652] loop7: detected capacity change from 0 to 264192 [ 1860.511014] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1860.512383] EXT4-fs (loop6): group descriptors corrupted! [ 1860.515798] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1860.525659] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1860.527010] EXT4-fs (loop7): group descriptors corrupted! [ 1860.528961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1860.540535] loop6: detected capacity change from 0 to 98304 [ 1860.543459] loop7: detected capacity change from 0 to 264192 [ 1860.550444] loop3: detected capacity change from 0 to 6 [ 1860.554059] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1860.555565] EXT4-fs (loop7): group descriptors corrupted! [ 1860.560709] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1860.561424] No source specified [ 1860.562068] EXT4-fs (loop6): group descriptors corrupted! [ 1860.564301] No source specified 10:55:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1860.578428] EXT4-fs (loop3): Can't read superblock on 2nd try 10:55:40 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="d0a3528ed35f1200407766695c653000e48e62818fc5b4d4f46557c77fe71d8499b9fd74626f84a745723f1f8ac4814b48b0889e361af95d13abbfd89c556b6099b7803526c605c68df15c81ae8fd790878a5d2b7bf651a81865bbbbf76a81a8e515e9498f851ae460c6eb2260c99b7521933c40a1c62fabe89ed63b8bb739aedb79f7f74f98bb4172522c39b5c1e71f67cdb578e9adf803d44abb134aed3f65a655f78fb50b85953493241ee74016c6d4f23101d90e92562a9056c3327396b667d71c2f1bfb890edffdf85f751fed15cc5d9aae12b6ab26515e771fe6cf58b6d795f82ed940708d6eb718944be999e871cb5420"]) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x8080}], 0x1, &(0x7f0000000540)={r2, r3+60000000}, &(0x7f0000000580)={[0x3]}, 0x8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000008000000000060000000000000008000000000000000002000000000000f029000000000000ea080000000000007f0000003f070000000400000000000004000000000000000000000000000000ffffffff0000000004000000000000003000"/152]) tee(r0, r4, 0x4ab, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/13, 0xd}], 0x4, &(0x7f0000000300)}, 0x2040) [ 1860.653752] No source specified 10:55:40 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xce030000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1860.659604] No source specified 10:55:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1860.698985] loop6: detected capacity change from 0 to 131072 [ 1860.708974] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1860.709796] EXT4-fs (loop6): group descriptors corrupted! [ 1860.714473] loop6: detected capacity change from 0 to 131072 [ 1860.718513] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1860.719279] EXT4-fs (loop6): group descriptors corrupted! [ 1860.736793] loop7: detected capacity change from 0 to 264192 [ 1860.750616] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1860.751054] loop3: detected capacity change from 0 to 6 [ 1860.751354] EXT4-fs (loop7): group descriptors corrupted! [ 1860.765300] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1860.769010] loop7: detected capacity change from 0 to 264192 [ 1860.771971] loop3: detected capacity change from 0 to 6 [ 1860.775943] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1860.776071] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1860.776755] EXT4-fs (loop7): group descriptors corrupted! [ 1860.904742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.301260] Bluetooth: hci1: command 0x0406 tx timeout 10:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000004e6e00feeb5d0861"], 0x36) 10:55:50 executing program 0: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='}\x00', 0xfffffffffffffffd) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xc2}, 0x50000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xffffffff, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ce000000000000002e2dc89993583000"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r9, r10) connect$unix(r11, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = dup3(r0, r0, 0x80000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000002800)) io_submit(r1, 0x8, &(0x7f00000027c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x91a2, 0xffffffffffffffff, &(0x7f0000000180)="b547ef7a3925a7c77f7831e122c04d46ebd9c2942a2e284ee887e96b71", 0x1d, 0x80000000, 0x0, 0x2, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x78c, r5, &(0x7f0000000200)="5527a61e39453112069a9ed0e0966b32a4477b6aec919685a55b8fed654ea7927ceb1aff98ff61bf65cca073ff1ab5220fb3796cac65b1f2b669bad7e0dfc6117225df", 0x43, 0x56, 0x0, 0x0, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000000300)="1639ebf104ce77b019d799e0ad800602dc63e5272d6a22253bb5365f37faac6c4512ff350ea1c851ba3fef18b0a7f480aa89db3eabc7878f6f75bdc8598d2f432000bc0f6f1bb2e306bf0fff1ea9ea8b2b79f74b9b151692c50848a5fee7c3bb936fa56761c4a05727250490076b200871f8838f9a053342ec0bdd341cd75545f131aab45698dd99d378cdd1833d20a07a7b5be81031855c3cee7bee7b6d1dc975ae0be660fffa43a92acb21d90eb0addae9bffbee09aa9ffa9dec1b5ee84c8db2073084548d26b337370e8329c646d26277e9bc929bcef121e5c1bc7bfca0e44c7fd1624938d3334fe77a4c", 0xec, 0x3, 0x0, 0x1, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0xdfba, r8, &(0x7f0000000480)="043e47a393886c64bb72050a19398c299beaff4796c9447d51df8e9b5991a5b73065d3b5989afc7fa4a50f5b0f58e0195dc68e24a102fac7582ddc60d2ff26433cd00831e0e3179558dccfcee41f19ee12d8571f137aa8c988834e7020b5707e962bad586bc9a8f867f77681542232da7db7ae3857fc09b32bff8a30b17201b7dc7f855d229088d7de6760060ddd3363c52f91cdd80b9d6a01faecce1c1f7cbc08c3ed35e8d4ca476d5a23a4fce1", 0xae, 0xc38, 0x0, 0x2, r11}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0x4, r12, &(0x7f0000000580)="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", 0x1000, 0x8, 0x0, 0x1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x7ff, r0, &(0x7f00000015c0)="1d21eb99bb8c76a7f3b53db7ba29d7dbfc3549901e10c3d948c673126653f035abb05474d436ea8f1c6f561d60144d6c8c1f9ad67b97c9c8128750f3400893435060b78bc9033fdb278fe348df2755efe27dcec35ecabd527aeffc4d66f6cff90bf5336a20f0aafbb35e0820e300b8b2d91b1f1875c35e9b25262e32299b6b937eb0d4d7a09a1001039abfd3dd9869800d9b19d3ba793b2e03403ebfc763156c0862d9f788c028232232780a3bda7932292e95aab8194b9e56685544f7230e79544d1702e48e9c6bff9896a44efbe4195fd7cee1687c73c6464d89480a31c15ca7c1c264d2c433fba6436c35", 0xec, 0x4362645c}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000001700)="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", 0x1000, 0x6, 0x0, 0x7}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000002740)="74390363ee5fba0d45dafd036222c405214c90cd67fc3f7b40a394d9f65d412a43e0d7464fb6c5bcea", 0x29, 0x5, 0x0, 0x1, r13}]) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:55:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:55:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:55:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd5030000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:55:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x68, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3aa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x73b8afa531893384}, 0x0) [ 1869.877513] loop3: detected capacity change from 0 to 7 [ 1869.889343] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1869.895605] loop7: detected capacity change from 0 to 264192 [ 1869.901747] loop3: detected capacity change from 0 to 7 [ 1869.902363] loop6: detected capacity change from 0 to 163840 [ 1869.904181] No source specified [ 1869.905920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1869.907027] No source specified [ 1869.910172] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1869.910901] EXT4-fs (loop6): group descriptors corrupted! [ 1869.913872] EXT4-fs (loop3): Can't read superblock on 2nd try [ 1869.918692] loop6: detected capacity change from 0 to 163840 [ 1869.922983] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1869.923844] EXT4-fs (loop6): group descriptors corrupted! [ 1869.929317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:55:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf4200000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1869.945800] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1869.947187] EXT4-fs (loop7): group descriptors corrupted! [ 1869.964041] loop7: detected capacity change from 0 to 264192 10:55:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1869.981768] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 10:55:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1869.983167] EXT4-fs (loop7): group descriptors corrupted! [ 1869.994978] No source specified [ 1869.999656] No source specified 10:55:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1870.027903] loop3: detected capacity change from 0 to 8 [ 1870.029939] loop6: detected capacity change from 0 to 196608 10:55:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x68, 0x8, 0x2, 0x6, 0x0, 0x20, 0xa306, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x1010, 0xfffffffffffffff9, 0xf9d2, 0x4, 0x10001, 0x7, 0x7f, 0x0, 0xe7, 0x0, 0x1ff}, 0xffffffffffffffff, 0xd, r0, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x6, 0x2, 0x2, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x110, 0x9, 0x800, 0x1, 0x0, 0x20, 0x0, 0x0, 0x1f, 0x0, 0x79b}, r1, 0xc, r4, 0x0) dup2(r0, r0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1870.035875] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (1 blocks) 10:55:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff030000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1870.051530] loop3: detected capacity change from 0 to 8 [ 1870.059505] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (1 blocks) [ 1870.061527] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1870.063140] EXT4-fs (loop6): group descriptors corrupted! [ 1870.070624] loop7: detected capacity change from 0 to 264192 10:55:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1870.076450] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1870.077160] EXT4-fs (loop7): group descriptors corrupted! [ 1870.081564] loop6: detected capacity change from 0 to 196608 [ 1870.084733] loop7: detected capacity change from 0 to 264192 [ 1870.088841] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1870.089548] EXT4-fs (loop7): group descriptors corrupted! [ 1870.099448] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1870.100606] EXT4-fs (loop6): group descriptors corrupted! 10:55:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1870.133504] No source specified [ 1870.138314] No source specified [ 1870.174971] loop3: detected capacity change from 0 to 16 [ 1870.183612] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1870.195753] loop3: detected capacity change from 0 to 16 [ 1870.200452] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) 10:56:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0)=0x100, &(0x7f0000000280)=0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1b4, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x9, 0x5, 0x8, 0x4, 0x7, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x7, 0x1, 0x2, 0x5, 0x9, 0x100, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x15b, 0x3, 0x1, 0xffff, 0x3f, 0x1f, 0x9]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x5}, {0x7}, {0x3, 0x5}, {0x5, 0x6}, {0x0, 0x6}, {0x1}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x1}, {0x7, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x9}, {0x1}, {0x5, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x5}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x1b, 0x9, 0x60, 0x16, 0x9, 0xc, 0x4, 0x74, 0x4, 0x18, 0x16, 0xc, 0x2, 0x36, 0xb, 0xc, 0xb, 0x3, 0x24, 0x60, 0x2, 0x3, 0xc, 0x18, 0x1, 0x12, 0x2, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x13, 0x7, 0xcf20, 0x6, 0x8001, 0x1000]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x12, 0x60, 0x6, 0x16, 0x36, 0x3, 0x1, 0x48, 0x18, 0x1, 0x24, 0x2, 0xa, 0x12, 0x47, 0x2, 0x6c, 0xce6dbdecf284408d, 0xc, 0x36, 0xb, 0x48, 0xc, 0x6, 0x0, 0x0, 0x1b]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x9, 0x16]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0xc, 0x9, 0x18, 0x6, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x8, 0x8, 0x1, 0x1, 0xfff, 0x5, 0x3]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x8}, {0x5}, {0x1, 0x5}, {0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x4}, {0x3}, {0x7, 0x6}, {0x1, 0x5}, {0x1}, {0x6, 0x6}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x5}, {}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x16, 0x1}, {0x6, 0x1}, {0x18}, {0x30}, {0xc}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x61}, {0x9, 0x1}, {0x12}, {0x2, 0x1}, {0x18}, {0x4, 0x1}, {0x30, 0x1}, {0x24}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 10:56:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:56:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) 10:56:01 executing program 0: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x29, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 'sed\x00', 0x0, 0x80, 0x45}, 0x2c) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r0, 0xa19d4000) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:56:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:01 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:56:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1881.135642] loop3: detected capacity change from 0 to 16 [ 1881.149705] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1881.168871] loop3: detected capacity change from 0 to 16 [ 1881.181850] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1881.183575] loop6: detected capacity change from 0 to 229376 [ 1881.188399] loop7: detected capacity change from 0 to 512 [ 1881.198483] No source specified [ 1881.203801] No source specified [ 1881.229988] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1881.231408] EXT4-fs (loop6): group descriptors corrupted! [ 1881.236173] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1881.237827] EXT4-fs (loop7): group descriptors corrupted! 10:56:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1881.247980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.266611] loop7: detected capacity change from 0 to 512 10:56:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1881.275399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.283600] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1881.284172] loop6: detected capacity change from 0 to 229376 [ 1881.285068] EXT4-fs (loop7): group descriptors corrupted! 10:56:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x94c}, 0x4cc1a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1881.323180] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1881.324750] EXT4-fs (loop6): group descriptors corrupted! 10:56:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x225f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1881.385455] No source specified 10:56:01 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1881.393735] No source specified [ 1881.417980] loop3: detected capacity change from 0 to 17 10:56:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1881.430439] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) 10:56:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 10:56:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1881.484888] loop7: detected capacity change from 0 to 512 [ 1881.502948] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1881.504455] EXT4-fs (loop7): group descriptors corrupted! [ 1881.530324] loop7: detected capacity change from 0 to 512 [ 1881.536601] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1881.537980] EXT4-fs (loop7): group descriptors corrupted! [ 1881.564451] loop6: detected capacity change from 0 to 262144 [ 1881.573135] No source specified [ 1881.579361] No source specified [ 1881.583451] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1881.584835] EXT4-fs (loop6): group descriptors corrupted! [ 1881.624043] loop6: detected capacity change from 0 to 262144 [ 1881.629738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.645161] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1881.647069] EXT4-fs (loop6): group descriptors corrupted! 10:56:13 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x78, 0x0, 0x0, 0x20, 0x0, 0x10000006, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x41044, 0x6, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=',.\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)=0x4) r5 = dup2(r2, r3) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='+\'-[\x00') ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000001c0)) 10:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x38}}}}}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:56:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:56:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:56:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1893.050576] No source specified [ 1893.053724] No source specified [ 1893.057691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1893.090112] loop7: detected capacity change from 0 to 512 [ 1893.091416] loop3: detected capacity change from 0 to 18 [ 1893.100971] loop6: detected capacity change from 0 to 264192 [ 1893.109615] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1893.113142] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1893.114814] EXT4-fs (loop7): group descriptors corrupted! [ 1893.123958] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1893.125725] EXT4-fs (loop6): group descriptors corrupted! 10:56:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1893.135010] loop3: detected capacity change from 0 to 18 [ 1893.141690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1893.146714] loop7: detected capacity change from 0 to 512 [ 1893.148531] loop6: detected capacity change from 0 to 264192 [ 1893.152053] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1893.160023] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1893.161669] EXT4-fs (loop6): group descriptors corrupted! [ 1893.167223] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1893.168796] EXT4-fs (loop7): group descriptors corrupted! 10:56:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:56:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1893.279883] No source specified 10:56:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1893.308589] No source specified [ 1893.346786] loop6: detected capacity change from 0 to 264192 [ 1893.355558] loop3: detected capacity change from 0 to 19 [ 1893.365147] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1893.366656] EXT4-fs (loop6): group descriptors corrupted! [ 1893.374266] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1893.377623] loop7: detected capacity change from 0 to 512 [ 1893.397559] loop6: detected capacity change from 0 to 264192 [ 1893.399578] loop3: detected capacity change from 0 to 19 [ 1893.413014] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1893.414859] EXT4-fs (loop7): group descriptors corrupted! [ 1893.416832] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1893.419393] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1893.420827] EXT4-fs (loop6): group descriptors corrupted! 10:56:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:56:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:56:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1893.527185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1893.588063] No source specified [ 1893.590910] No source specified [ 1896.144740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1896.149447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1896.151574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1896.163397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1896.165983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1898.181235] Bluetooth: hci1: command tx timeout [ 1900.229347] Bluetooth: hci1: command tx timeout [ 1902.278185] Bluetooth: hci1: command tx timeout [ 1904.325180] Bluetooth: hci1: command tx timeout [ 1908.357429] Bluetooth: hci4: command 0x0406 tx timeout [ 1914.526230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.527589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.582177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.583471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.716947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1915.026189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:56:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10:56:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:56:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:56:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x56, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"35e6a1dcd983152d2085e6237a5ab318", 0x0, 0x0, {0x68, 0xab51}, {0x1, 0x9}, 0x4dad, [0x0, 0x0, 0x8, 0x8, 0x7, 0x401, 0x8, 0x1, 0x2, 0x48e7, 0x5cc, 0x936, 0x2, 0x1, 0x0, 0x1]}) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7) 10:56:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x3c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x80) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @random="ce455180c945", {0x2, 0x9}}, @random="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"}, 0x116) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000500)={0x114, r9, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4fd089627d4fbdc90da3c187856f2dc6b9a894a82dacdb6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x81}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xac, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4080}, 0x80) [ 1925.510349] loop6: detected capacity change from 0 to 264192 [ 1925.519446] loop3: detected capacity change from 0 to 31 [ 1925.525889] loop7: detected capacity change from 0 to 512 [ 1925.529228] No source specified [ 1925.533924] No source specified [ 1925.534549] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1925.534576] EXT4-fs (loop6): group descriptors corrupted! [ 1925.536751] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1925.550610] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1925.552069] EXT4-fs (loop7): group descriptors corrupted! [ 1925.560897] loop3: detected capacity change from 0 to 31 [ 1925.563023] loop6: detected capacity change from 0 to 264192 [ 1925.568772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.575624] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (3 blocks) [ 1925.578512] loop7: detected capacity change from 0 to 512 [ 1925.579453] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1925.580821] EXT4-fs (loop6): group descriptors corrupted! [ 1925.589759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.594270] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1925.595614] EXT4-fs (loop7): group descriptors corrupted! [ 1925.605544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:56:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1925.627532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=14448 comm=syz-executor.1 10:56:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:56:45 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x40, 0xfc, 0x80, 0x1e, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x6f, 0x81}, 0x1, 0x3, 0x7, 0x3, 0x778f1707, 0x0, 0x3, 0x0, 0x887a, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='(@\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) 10:56:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1925.730345] loop6: detected capacity change from 0 to 264192 [ 1925.735323] loop3: detected capacity change from 0 to 32 10:56:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1925.743184] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1925.744650] EXT4-fs (loop6): group descriptors corrupted! [ 1925.752777] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (4 blocks) [ 1925.767258] No source specified [ 1925.769514] loop3: detected capacity change from 0 to 32 [ 1925.772449] No source specified [ 1925.775441] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (4 blocks) [ 1925.801928] loop7: detected capacity change from 0 to 512 10:56:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1925.826622] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1925.827970] EXT4-fs (loop7): group descriptors corrupted! [ 1925.858980] loop7: detected capacity change from 0 to 512 [ 1925.885535] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1925.886590] EXT4-fs (loop7): group descriptors corrupted! [ 1925.945036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.948754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.957633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=14448 comm=syz-executor.1 10:56:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:56:56 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000340)="ceafa2ca76ee86dbaba7d32fc4164bf06bc859a325022be2666f105e25e734817a89b0dad515aa7e6f8ffbe2b0662f01770d23b1883c8428b53cb5ea8f260f2048534ad76c919aa8e35535d0493af6b1aaaf110524ee59bab6ccbef63e64f7b845855f357578d8a199c292bbba", 0x6d}, {&(0x7f0000000440)="331429604e35984ac0ce96fb973e7948a22656ee1084e8c5483340ad4e108f7d93b9987478237f73439a49b905b517bafe92e2426f5ec97d8b1af86f18db6e3a1ca20cbfd9e8e585ef4066e4b0492b876b8e95661889506a58549abdd3d747983a1c6afb5467b0cf", 0x68}, {&(0x7f00000004c0)="ca208addff4da025054d4e15ee816bf116849772fb3341f0f257d09937008eaa5288cbe7a284b8c758d9c99f6f79688ff97caa7305343cbbcf77d6ece163c32b66ba575dc62f8caddfd15b79752869b87fdc6246bcf0951773fba30d115e64ca40c655194fa07fa3edacdaf5c291acb8da439d6a3dfa77b252d5e5dd8e8e21", 0x7f}, {&(0x7f0000000540)="9a53bb017abbd5c01540ee58f123f690ebf94bf64f07830f63cb5223358907d72f4c7d461dd5c0c5ba82967dc69c85634f751af9e2b8b6e166585a756897d574e9fd23b8b3b2b956f6f18499af448c41df295287322cd50fb454a7655f82881dc06100f8a47b8c8e1dcae8af0718bace623fbe70377a1e69966d0a146f95a260a2f0ffc4ec9c298698f67687eeb9f673a5a1516a02d158b9493ba2924c6287d4ba1460794975e3dea5af5e75eb33f4b245be2427df902965bee47a9c80d3567b3fc9e18c642adbee2f74d7f202ce0eba728f868de6a06544e8", 0xd9}, {&(0x7f0000000640)="b47934793611b4828fc8c19e9fa414a79ca85588d90d47c35685270cac19acf0d1a9c5ab630b38ec9c4128415cc1883662514ec6248bbe845b1ee0d8ecf7a75e695049dec56c73d5a62add98bae13ae11f183a6e0731c48b69ce5efc49e237d333b02cab7370be6e43ba25487b0e3bb0ab38e0106b9aa8d3c9b8d6a8b0b1a75157a683f039986ed8e767a24de756ed69f81b3cb52e2995142104cac126678ab64503b0f848abe1e4", 0xa8}, {&(0x7f0000000700)="a2525bb63d541ce4b2f02083b85c60144d060c3a10d0a8beab8a5fa0e44c4541b783c6c7bd8bbc7a6243f5300286094ecbc32a9e9edbcfe43ddecd2ab2bd46a8b2b5293ccf363ea62ec2d803fef6607f429fff531d71ccee999772dc26b3ebedb45ad658ed99cbfecbeb3145f67382209138d6a5a351ef3020707c91008baf5ff0ac1c921580cb25701f", 0x8a}, {&(0x7f00000007c0)="a86cb9ff2e3d244c61c90ba524ebba4b313aef3b51611f1016e92cac24815d08ec192580a5cc409fac5fde908856d1432e567b39f10c73e38c0df3c915b06a352096900b260a9d5c395b127b63269c228e9f79ebe89e0a99744e376fea858ebee06a7706183a7a23f3fff36c02ab6fb2eae2c985", 0x74}, {&(0x7f0000000840)="5053ca66006e63a4c49d7e07f0faacd01ed52a90cdb013d8366a16b70b3e8aa5e9555dea9ed5dde7d2112254f60b2a2b264013d93bc443eed57e12976b95acdaa6b7959d467d9c3d622cdbaf3e20bf3dac64d89e491ec19cef9a20e61839168742d66840933be9dcdff80ba537f0fd69a54f21a0b9e04cab8e6b5661c540964b90d646a276df94a47190b4141ed527b913e8d646653a00f5a39f835be9730530271a70837e35aa79a1eb977fd813d209d48a4a6263bdd904edd1adb8c425ba74dd4802e8b89dd01a28c8556327529efc458d52b957d54e9c077749d8ecccaf4000ad872237", 0xe5}, {&(0x7f0000000940)="f7406e7766e38ffd73eabe2cfcdb5d5a34e8bd0332e7531c993c2d6efa9dc636d88149df13677a9118017f76da702dd1e87ec2c783ff365c7c56b63afb6858e7a2ef40be67bde6dcfc8fd94d243744b5cf3ab36f3c4cf99424427cc80864595810d948d3bed320621fa9688ee6f15f810588b77d019ad6fd92c9498b8e69a179f950af6dec24732658eb9513caf3dbce292539c228fdb7baf461ca84e3af114f3298b92224f0df35265f", 0xaa}, {&(0x7f0000000a00)="430a4661b73866c94712f6ef528f04083d3dffec031fc5fbe9c723a2f309091bf112d12c8cd94bd9ae6cc0a39f89164e9503cf7770f23ef09bcb5dc5cc782358352fd0a5d728461044e5b47c10b3c2d8c014c344743048062af1fba2c9b92d4622c16ddc3230aac9c703a0135d166a517e3966464e0e3ea8fe28f3c9f91bbef6", 0x80}], 0xa, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r0, r2, r5, r6, r2, r2, r1, r3]}}], 0xe0, 0x4000844}}], 0x1, 0x48000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='%\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x0) connect$unix(r9, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000080)={0x10001, 0x1000, 0x400, 0x8, 0x42, "7789db2a7b18a33a8563c5944a8a37fd8f96b7", 0x4, 0x3}) 10:56:56 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 10:56:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10:56:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x10, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1936.059536] loop3: detected capacity change from 0 to 33 [ 1936.061912] loop6: detected capacity change from 0 to 264192 [ 1936.074564] No source specified [ 1936.081197] No source specified [ 1936.083579] loop7: detected capacity change from 0 to 512 [ 1936.090978] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (4 blocks) [ 1936.110435] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1936.112023] EXT4-fs (loop7): group descriptors corrupted! [ 1936.114873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1936.119612] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1936.121180] EXT4-fs (loop6): group descriptors corrupted! [ 1936.122415] loop3: detected capacity change from 0 to 33 [ 1936.137130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1936.142960] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (4 blocks) [ 1936.145080] loop7: detected capacity change from 0 to 512 10:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1936.161476] loop6: detected capacity change from 0 to 264192 [ 1936.166867] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1936.168435] EXT4-fs (loop7): group descriptors corrupted! 10:56:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1936.189657] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1936.193005] EXT4-fs (loop6): group descriptors corrupted! 10:56:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5f22, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:56:56 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0x1f, 0x0, 0x20, 0x0, 0x1, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000080), 0x2}, 0x40, 0x9, 0x9, 0x0, 0x1f, 0x200, 0x9, 0x0, 0xfff, 0x0, 0x4c06c036}, r1, 0x1, r2, 0x8) [ 1936.299646] No source specified [ 1936.306997] No source specified 10:56:56 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1936.331362] loop3: detected capacity change from 0 to 47 [ 1936.346379] loop7: detected capacity change from 0 to 512 [ 1936.349048] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (5 blocks) 10:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:56:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1936.370048] loop3: detected capacity change from 0 to 47 [ 1936.370246] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1936.372108] EXT4-fs (loop7): group descriptors corrupted! [ 1936.377880] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (5 blocks) [ 1936.402305] loop7: detected capacity change from 0 to 512 [ 1936.414968] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1936.416726] EXT4-fs (loop7): group descriptors corrupted! [ 1936.423591] loop6: detected capacity change from 0 to 264192 [ 1936.441345] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1936.442750] EXT4-fs (loop6): group descriptors corrupted! [ 1936.466722] loop6: detected capacity change from 0 to 264192 [ 1936.486062] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1936.487482] EXT4-fs (loop6): group descriptors corrupted! [ 1936.489260] No source specified [ 1936.499768] No source specified [ 1936.507063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:57:04 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc200, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) 10:57:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:57:04 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10:57:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="7894777717193c4cbe44edfeeb6b976bcb07f3547f559b647358ddf78a8a67d272668fa65aeb917ccdceb92f2377c587f913f634aaa4cb8fec54e58e5941428e347915626c4ad68dd86787ed00eb12cdc87ea6b08c859a73ef19e898c6a9e1e60947cc0e4f745ed6deb2c8941753dfcd1c801694a7fe2e2fa5d9472e5e389f603cbdf88b5d4fdaaa8f708ee1442a2e7f93517ae3e4e4c95866798bc2eb728ee7e3501e5985cede1cc8a758450bc20aa001cb327f1f4db243cd2df32f42104ed4"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 1944.746837] loop3: detected capacity change from 0 to 97 [ 1944.754354] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (12 blocks) [ 1944.757376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1944.764770] loop6: detected capacity change from 0 to 264192 [ 1944.766884] loop3: detected capacity change from 0 to 97 [ 1944.772162] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (12 blocks) [ 1944.774385] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1944.775238] EXT4-fs (loop6): group descriptors corrupted! [ 1944.780591] loop6: detected capacity change from 0 to 264192 [ 1944.785253] loop7: detected capacity change from 0 to 512 [ 1944.788827] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1944.789590] EXT4-fs (loop6): group descriptors corrupted! [ 1944.802343] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1944.803111] EXT4-fs (loop7): group descriptors corrupted! [ 1944.810426] No source specified [ 1944.817556] No source specified [ 1944.830633] loop7: detected capacity change from 0 to 512 [ 1944.832417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:57:05 executing program 0: r0 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="2973d8b986040f17fe11dc8e6d0e5826be0814f19e884843f15977200bfa4fc9c649b64cf7fb0d0b6dc87bbbb5e02cf2234cd6b58f0c7d0c2f40c7c98a71e21fe03a7456abfbe5e46a2f12c9b9ac75427623470c6f8338d4e053e8cb357ffa9a7bb3abba6202ebe24fb20eb38c0371dfef3d85a2a406eeeb7190ba0e34", 0x7d, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000180)=""/174, 0xae) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:57:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1944.846319] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1944.847056] EXT4-fs (loop7): group descriptors corrupted! 10:57:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1944.886580] loop3: detected capacity change from 0 to 97 10:57:05 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1944.890785] loop6: detected capacity change from 0 to 264192 [ 1944.901365] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1944.902234] EXT4-fs (loop6): group descriptors corrupted! [ 1944.905984] loop6: detected capacity change from 0 to 264192 [ 1944.907183] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (12 blocks) [ 1944.910047] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1944.910937] EXT4-fs (loop6): group descriptors corrupted! [ 1944.934481] loop3: detected capacity change from 0 to 97 10:57:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1944.955413] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (12 blocks) [ 1944.977546] No source specified [ 1944.982650] No source specified 10:57:05 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x3, 0x0, 0x0, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r6, 0x49033000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0x8) fchown(0xffffffffffffffff, 0xffffffffffffffff, r7) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001880)=ANY=[@ANYBLOB="d00001004ed4a27ab09996da", @ANYRES32=r3, @ANYBLOB="f9000000000000002e2f66696c653100c29362c94cb83645adf661c48ac5c8f7dda3df438813546877a74ca9b209e96928ab6ff812b3fb039b99fe403e713aecc09a81e5f81a72b751eefbdc29831c047284a85107697ff5e7fddda0010ca314917e9e63122ad2d90927134036acf8e00cff05905ac070ff67970a5a1b8edcf2ba872f72ff44db7232766f50cc2fc9b548b5e10f15490a6316ba29064aca87d81d33c094fe60185fb129e206b955e160e1c272053e16ad3254e1ebb75c0676d82b8a900de2f8814efebcd803479eddfe000000"]) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r10, 0x4b72, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = accept$unix(r2, &(0x7f0000001d40)=@abs, &(0x7f0000001dc0)=0x6e) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000200)="10d84329218b5e9d02ac3084b38566e1db8653eb53b53a1e73ebb06e8b3169b135a72f1edb036bee25dd4c0f0f3dadd94668c4371fda39202aacf14c77225d3406d758d2237e97156fe77d908d566e44fd41a28000b885451f661335ad304f892ca925f8c3dddfb03e5d4f7866561feacb22c7daf4f073891002a271f8558e5eaf71b80b173fdd53b1cde17677599ac21e58c05ea7bb879963bd68c464595ddc6564bd0323ca0db1e169a149a7f737198e6e3b8add3ba444a519d4e4ef62d723119ae7d4bab4ebc14a5b2f83a0332d8f8cf7ca5ea65666627af3539e54", 0xdd}, {&(0x7f0000000300)="9690f3ee088e00f70c77347e6767da24d532bd4870bd97f90c2f4f2f4295286b896d3d5e11d210d85714e168c17cbcbc4b54fc6a3d499f348060c1ad68df0205fce2e1d7795dbf25c53e316cc649946c23c731b2577ed3233fd1ab7d5fa8a99d50f5dd5a6b9b1269658f3f98448ac4d0fead145b51db3903e6d42fff7f279d1dcde52a4c05034f184d4996ec29f33cfab9acf5f46b0834c5e4425df3ec8e6fd0f472f1f11a967e5fd4e72901eb00a61d10e71eb9c9a5ce40574dd88b94fd", 0xbe}, {&(0x7f00000003c0)="8b47fb9d904c1fb6cc3bf435a945a33954b61f9666d0f5c84cf7eb2f557c5f493bb15c9e4c05286acbbb4466ee0d9103a611966ad26610c0904a70f2fd5815d485f87651c03276b2fa25acdae315d9d688b8f2d758cd1e548ed028264bef4d12ab39ea6ef1a6158535e24d32869fee356c03ee67d4a51a5ee1cd3ccf1797682318f69c42db5dd0976575e85db068693aecd6a79623b3ba2c045015048421b2369c16a25c3b352aa0dbc8897713275751812121d497c00ca4716689cccb67d5a942d635e7b0793bb01659e384e60878a320d0", 0xd2}, {&(0x7f00000004c0)="21c204feb8211d93a472a2e8cad1f8d6f65aa230516d309967b638b9aa10cc53b7a90bc634a0244934adf468b9423760ba3d27d4de65e10341dcff750c48b4", 0x3f}, {&(0x7f0000000500)="86c902e9248433724d5e4d79fd75160e5318c45e414e3f48821016a64d11d6162a0c3cb499f44cbd02bcb128d5472517dea206c1ca8dbf766e94e3a032d85996341abf8a0537c07b3d938cdcbde509ae88f5d7771f5d647ebc4e36162613364b2f5a1ad1af09a9b0891d41", 0x6b}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="a2f60c47737cac8b1fffc0b70534a330393b70adf1f48dd0d98b3b0397e5ce70ea985355ca08e549907c15df55ec8fa9", 0x30}, {&(0x7f00000015c0)="2437950b1ff305d10bcfd9df0479a48d3833cd22d3a232b43dc69b35a9b6749f50e6cb3b2567606a01d5858f5549977634aa1c5eff46fc084c966bdee3162696e9a891f395785610184eda639e3094a6c651e1e7da8c0d5f5bbcc94b13316d5fda1c721e23cab98ef5d80728ee105806739b106e28914cb5f59366c900eee8885c963e1dee8b3793faaec0ce88", 0x8d}, {&(0x7f0000001680)="33b19337104184db62af5ef7d0d906472c7455e84a31f5b31a2742ba6c1a746a58b20d5f36e05798d1313f4dbfa2f13ea69bc21394183d07a1ba35b7de6f56aa29cf3f69d8e28ee0da6927d0ab53045bfd7d9b5d601f47884b76fbdf3f1bcc61d3c1a492029ee76a08140615fa1fcd83f9b9b1bc645c2c128e8a415cba39c1f888", 0x81}], 0x9, &(0x7f0000001f40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000010000000400000000000000000000000000642b535a387c21dd7ee4bbba602390cbb64c3f9dc29c038826f65bbf8cd976e08646b2cf2f068688a8b71e123957d4b416f0f2cd04e7622856404614abcc11328812d7a91a189f40cd5e2aaf1ed0382c89e68eaf02280660a5108de37b2b9732a843a47bd06360360e19948e9bfebe798693c24249492ceb9236a04415af4b2c6d764b52d5a65440770f3a75bcc272b731", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="1c80000000000100000082000000f7720f03d5ce770494b98b", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000004100000001000400", @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="00000000200000000000000001000001200000006cb564ff3430ebf2be122867a2d499a13bd8b6de8b29b6acbb8929619a0f5a1c1a4f56a853b0eabdaed6bf2b11f16c15891e2a65239bc7366574f79bba64d817db0a606f31bd70d869da96420574a3f203724620db", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r4], 0xe8, 0x10}, 0x40) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x7f, 0x3f, 0xff, 0x0, 0x0, 0x88400, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x40400, 0xd1, 0x2, 0x7, 0x40, 0x9, 0x2, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0, r3, 0x1) 10:57:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1945.023736] loop7: detected capacity change from 0 to 512 [ 1945.033281] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1945.034012] EXT4-fs (loop7): group descriptors corrupted! [ 1945.046781] loop7: detected capacity change from 0 to 512 [ 1945.051731] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1945.052490] EXT4-fs (loop7): group descriptors corrupted! [ 1945.067441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1945.073128] loop6: detected capacity change from 0 to 264192 [ 1945.091267] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1945.092772] EXT4-fs (loop6): group descriptors corrupted! [ 1945.116009] loop6: detected capacity change from 0 to 264192 [ 1945.118422] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1945.119160] EXT4-fs (loop6): group descriptors corrupted! 10:57:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:57:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 10:57:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x24, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:57:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc400, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, r1, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="0375f8527aa092a30e3547a9ed60cf8b47c62041ee37c2d5bafd0f29c4954084a7632a60cdc169b22e90f9d49e0c581633c7cccc79844f3fe03c748b6df4c5466ff628f0b0156c1db58a718b6aa9ed16a6fb0c19ad2c25643d7519d0c725abe77dceb60428947b427120e5a6cf8a0fec659f5b0b59c592"], 0x36) 10:57:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1954.896880] No source specified [ 1954.900423] loop7: detected capacity change from 0 to 512 [ 1954.900841] No source specified [ 1954.902157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.911998] loop6: detected capacity change from 0 to 264192 [ 1954.918011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.921922] loop3: detected capacity change from 0 to 98 [ 1954.942558] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (12 blocks) [ 1954.943723] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1954.945165] EXT4-fs (loop7): group descriptors corrupted! [ 1954.949575] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1954.951153] EXT4-fs (loop6): group descriptors corrupted! [ 1954.971961] loop6: detected capacity change from 0 to 264192 [ 1954.978768] loop7: detected capacity change from 0 to 512 [ 1954.979532] loop3: detected capacity change from 0 to 98 10:57:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1954.989322] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1954.990726] EXT4-fs (loop6): group descriptors corrupted! [ 1954.994569] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1954.996152] EXT4-fs (loop7): group descriptors corrupted! [ 1954.997960] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (12 blocks) 10:57:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xff, 0x1f, 0x4, 0x6, 0x0, 0x6, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0xc280, 0x2, 0x5bfe, 0x0, 0x1293a1fd, 0x7, 0x4, 0x0, 0x400, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x10200, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000007c0)={'gretap0\x00', @dev}) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000740)={0x128, 0x7, &(0x7f0000000340)="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"}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xab, 0x3, 0x80, 0x5, 0x0, 0x9, 0x1040, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x5}, 0x0, 0x5, 0x6, 0x5, 0x8, 0x0, 0xc2f, 0x0, 0x8, 0x0, 0x5}, r1, 0x2, r4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xfd) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x6, 0xe3, 0x9, 0x0, 0x200, 0x80c81, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x80, 0x1, 0x4, 0x1, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x5, 0x0, 0x10000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x8, 0x5, 0x3, 0x3, 0x0, 0x1, 0x10, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x40090, 0x7fffffff, 0x6d, 0x3, 0x80000001, 0x80000000, 0xff, 0x0, 0x40, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x5) 10:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:57:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1955.091341] No source specified [ 1955.099297] No source specified 10:57:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:57:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1955.181835] loop7: detected capacity change from 0 to 512 [ 1955.197996] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1955.199475] EXT4-fs (loop7): group descriptors corrupted! [ 1955.210529] loop3: detected capacity change from 0 to 108 [ 1955.210998] loop6: detected capacity change from 0 to 264192 [ 1955.222542] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (13 blocks) [ 1955.242843] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1955.244370] EXT4-fs (loop6): group descriptors corrupted! [ 1955.244818] loop3: detected capacity change from 0 to 108 [ 1955.257773] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (13 blocks) [ 1955.273964] loop6: detected capacity change from 0 to 264192 [ 1955.287524] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1955.289076] EXT4-fs (loop6): group descriptors corrupted! [ 1955.293634] No source specified [ 1955.302543] No source specified 10:57:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:26 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1f) syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x80, 0x81, 0x9, 0x0, 0x1, 0x8200, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40, 0x9, 0x3ff, 0x0, 0x3, 0x4cf, 0x266, 0x0, 0x7, 0x0, 0xffffffff}, r1, 0x3, r2, 0x2) 10:57:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:57:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x66180000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="69557e46d94a62de8fe8758aeceea6555200da962a8174a77889526e"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:57:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 1966.447517] No source specified [ 1966.448433] No source specified 10:57:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1966.485348] loop7: detected capacity change from 0 to 512 [ 1966.485863] loop6: detected capacity change from 0 to 264192 [ 1966.487111] No source specified [ 1966.490647] No source specified [ 1966.494949] loop3: detected capacity change from 0 to 118 [ 1966.506577] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1966.507342] EXT4-fs (loop7): group descriptors corrupted! [ 1966.518255] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1966.519695] EXT4-fs (loop6): group descriptors corrupted! [ 1966.524769] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (14 blocks) [ 1966.534073] loop7: detected capacity change from 0 to 512 10:57:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1966.546566] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1966.547387] EXT4-fs (loop7): group descriptors corrupted! [ 1966.550008] loop3: detected capacity change from 0 to 118 [ 1966.551798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1966.559813] loop6: detected capacity change from 0 to 264192 [ 1966.568199] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (14 blocks) [ 1966.571492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1966.572077] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1966.573623] EXT4-fs (loop6): group descriptors corrupted! [ 1966.595440] No source specified 10:57:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) [ 1966.601635] No source specified 10:57:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x0, r1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) 10:57:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1fe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x70010000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1966.709637] loop7: detected capacity change from 0 to 512 [ 1966.743607] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1966.745018] EXT4-fs (loop7): group descriptors corrupted! [ 1966.753594] loop3: detected capacity change from 0 to 120 [ 1966.760587] loop6: detected capacity change from 0 to 264192 [ 1966.768063] loop7: detected capacity change from 0 to 512 [ 1966.770046] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1966.771604] EXT4-fs (loop6): group descriptors corrupted! [ 1966.773254] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1966.780668] loop3: detected capacity change from 0 to 120 [ 1966.782727] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1966.784384] EXT4-fs (loop7): group descriptors corrupted! [ 1966.785899] loop6: detected capacity change from 0 to 264192 [ 1966.790643] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1966.790764] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1966.792179] EXT4-fs (loop6): group descriptors corrupted! [ 1966.876598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:57:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xab4, 0x8, 0x1ff, 0x9, 0x4, "fde5a615e4412493"}) 10:57:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:57:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xfffffffa}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10000841) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:57:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x74000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xc002, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) [ 1977.071561] loop3: detected capacity change from 0 to 122 [ 1977.085757] loop6: detected capacity change from 0 to 264192 [ 1977.096668] No source specified [ 1977.100489] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1977.102321] No source specified [ 1977.109606] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1977.110965] EXT4-fs (loop6): group descriptors corrupted! [ 1977.114065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.122446] loop3: detected capacity change from 0 to 122 [ 1977.135180] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1977.137571] loop6: detected capacity change from 0 to 264192 [ 1977.142872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.171537] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1977.173229] EXT4-fs (loop6): group descriptors corrupted! 10:57:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 10:57:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1977.278045] No source specified [ 1977.287365] No source specified 10:57:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7596ede8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x504}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1977.336969] loop3: detected capacity change from 0 to 127 10:57:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x4300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1977.384078] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1977.418973] loop6: detected capacity change from 0 to 264192 [ 1977.434406] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1977.435931] EXT4-fs (loop6): group descriptors corrupted! [ 1977.444560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.448645] No source specified [ 1977.448846] loop3: detected capacity change from 0 to 127 [ 1977.455328] No source specified [ 1977.471276] loop6: detected capacity change from 0 to 264192 [ 1977.477149] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1977.488447] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1977.490024] EXT4-fs (loop6): group descriptors corrupted! 10:57:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 10:57:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x400, 0x200000, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 1977.671275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.823938] loop7: detected capacity change from 0 to 512 [ 1977.829928] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1977.983640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:57:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:57:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x4500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x190, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x774}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0xffffffffffffff3a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x614}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x24}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:57:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:47 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x800, 0x3ff}, {0x8, 0x80}, {0xfffd, 0x7fff}, {0x9, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c65300094db62e8309c200921127dd7581e89e78393c1c758efb8da6b0d6b6d44cbb42cf001c4b5ebc5976dee31a0b46887c8019e688c922129cf27f3080700033ccbed337d5eeae669e0baa963f1cd991fad099e2e67341aeb6fb024b1546fe52bd35306b47313b6db92d87d7d27150ad8367d29050587942f767f80b4814cc763c8ce8c5b93a880b02cf31ed8acfb327a34bd245c64ad597f8f4e20c1ae4dcf7a8a8b656239bcc39a9fd58600b6776ec0b7b3326398b347f6bf93dbaf6a249b73feed65199c32fb59c2f5ae1c41a3df43c6012458852409447557addbc494"]) process_madvise(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)="a54b97c4d169eff56912c0331f86a5a65fed43ce7dc084e7e579fc03faa6b6b5c1b436750383afced77e72d451777f7498dc8ea6c39134df855ec5202b3fae37c9c5aa3aa108d8744e78249d35e9d34f5892ce1ea49d90ab6ff3f63542a6754669ab1eda2435fb2176d1b4664d0ffe6c", 0x70}, {&(0x7f00000001c0)="57c9593aab0d43340d70e6b5653838a0910d13a79bc524c32e08ce7e0895215d9297ea9a2be574054891a0dbfd45964f59ed1e612a9f2fe69c960a8ca5aed9a3dabf64e4c527c20875d1ca55c03010e5ef4283fedb2982286c75e5d5323fecf2fcf2f9a75729588e4816", 0x6a}, {&(0x7f0000000240)="7ab6c3d1fc11ed79abd77014084a67be1c5e5f06450a1ee4f3b2c567f9edb54f1f991329f4ce5b921c2ecf337c0c3ef67cc5b62c439817a1e34891241728013771", 0x41}, {&(0x7f00000002c0)="6d05934e2ac4d7d8d2e63ee074fdb506f5639be75c7115fe951ab29bc0f3cefa38866757d8241340231ac017a1f8f131b0e01deef6434e39120cd37654e5c9363aacf6356e21", 0x46}, {&(0x7f0000000340)="37a46466bcf7d61226d79dcece8dcc478d8c7cf77d46b34077287cff7338dcb53be49b0b4d1ce1b6a0b530bd47d78356dff69bd29b03c9b2c8504a177b6413dd66db89639349d6ea", 0x48}], 0x5, 0x9, 0x0) 10:57:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 10:57:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1987.062921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1987.075019] No source specified [ 1987.079209] No source specified 10:57:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 1987.118514] loop6: detected capacity change from 0 to 264192 [ 1987.119003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1987.122810] loop3: detected capacity change from 0 to 127 10:57:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1987.134606] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1987.146906] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.147753] EXT4-fs (loop6): group descriptors corrupted! [ 1987.152678] loop3: detected capacity change from 0 to 127 [ 1987.164546] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (15 blocks) [ 1987.165376] loop6: detected capacity change from 0 to 264192 [ 1987.181280] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.182058] EXT4-fs (loop6): group descriptors corrupted! [ 1987.195034] No source specified [ 1987.211577] No source specified 10:57:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') 10:57:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 10:57:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ed90100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1987.328720] loop3: detected capacity change from 0 to 512 [ 1987.339943] loop6: detected capacity change from 0 to 264192 [ 1987.342794] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.344136] EXT4-fs (loop3): group descriptors corrupted! [ 1987.355187] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.356518] EXT4-fs (loop6): group descriptors corrupted! [ 1987.358553] loop3: detected capacity change from 0 to 512 [ 1987.366424] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.367948] EXT4-fs (loop3): group descriptors corrupted! [ 1987.370692] loop6: detected capacity change from 0 to 264192 [ 1987.375536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1987.387345] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.388829] EXT4-fs (loop6): group descriptors corrupted! [ 1987.605834] loop7: detected capacity change from 0 to 512 [ 1987.609848] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 10:57:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf420000000000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:57 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x80000, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:57:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 10:57:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000006c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000500)=""/162, 0xa2}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x2141) sendmsg$unix(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000740)="d3a1a7b1ed2f6488188d5239a2d82a3dfcf5b12a9d4938a3f53c62dc88351f05e7a7d34f92e64107e05b6581fdd4330324d4e7a90d6e12e5ea1857a192aed9b1fa8fc7a8bd60e59697a82456cb09c15c8bf9146e7533bb5f428c73bc44860b0472dcd630e51bbc4c920ac9e42e8a79457383db8defcf64b0acee9dd670da1824e156d398789b398511dbf82e9653402e39e88e9f4a233bb6303cbebef01aaf4b1df6745b74ce8ee8026fa00ccab973b490113affff2937e5e5818e46", 0xbc}, {&(0x7f0000001a00)="7b96f18a3eb63397bfdc810cb88cb854d6d18cff08d5ef83d6f76bc666543755e2c59bcbfbbd19637fc48e01487dcbc91e7cf2c55c608ebc9d8c2b30defc332e3b8471e8ec31f33473f33b133ae1e5a1d7536eb5dc90b5207f88575124cb262e4a56918ad9498a180d16ab45cf6fe6be4a73e92a7e207ae233d22f1992fd9b7741078866a519123fda1cb03267a9e35fe5afab58a972f7fa2c7cdb524e7de26a0b5210", 0xa3}, {&(0x7f0000001ac0)="3d94efdb19ca027f4c63b5177e07298439d2c44b92c10eb832c6080315972e5dfab73f8915c43424d5f3d7040de0680a82bc3b6a2ad6263133efe393b4ae7094ee9ec2a4a23b4005e5ac7a7deaf0c7e42f74b70282fe85d5364211ed3d8f32b7056a785dce4ffb81b1da1679d9d66992fd51bc11e754c70a8b8340aa5203deec40cdc34dacec69aa8c2e5bd8808d1daabe4d060e4ad72321627f72246d38b576e3437a0cd71f4c219521ea2fe17a8ef326a6f82a24f0fd4d252dfded93fe34eb2fb5f201313d103a672199dcb6a648d52ae5cb8265a745d1cd7c885627a3b6bc877c708487a96e6f7c25b6d21b0b64f1847940aab4bf912e5aa03287565d45d8d68013b9cf15f427a81f6701033a9e48dfe1892c3df652379e514b5cebce9a10c540b220b014bee3ec35ebdceabfa59d6fe0a257e0b756e2fd86ee66ccb69dc8ef1854e38e81a12ff28f7adda72224a44f4de14f175e7fc611e91e56531ad6e3a17c07c2cc662d0f4f7cb595c9ca7e021cb61767faa4c0d59ad5bc6c4d724e04cb8263980a16ea1a4bb9bd2939f14d0128f6feff0b6add845ad84b524cdb01eb39a75075ae57a1dd941610845e6d38deadc928fc9b1d5afdc510b8dbba1f30c18ae6827a36dd7db6a1fcff8aed9cd3246e06ac5ec7989148904ae734a8b1636239a9aa5984ad24119bebf97b1b8404457825099bb566a6a29eb7a927bb083d5825f86d7bbdefa177cf31f4a13c32edfbf956096a0af3e11b55f376f98bdc842960ecf834710d6639f6e9c5358769ee14f3f912e13a42115a5b2d3d744290d9b7dc49fd528a48603a41e33699bf752895c21b952f35ddff839afee18adda6c962393f28fa1a1adecb2ac6009d5e7c9f0fb565c79983da1f60d6577fca2df82779b95b3f2c2b2fc995c872dac94cb57cd0c106ed8e6e30481e092e4d71d8aa853ba0eb9ba03a4b6fc230d555354314c03160f1aad374332dd81fa6044d1390253d492626f64b969e0cd8db8991b123b12d1347f86acefde7093ae2a6518dcb8813f23253584a31431e76ec2267c2c55c22b03fb7f430a8ce87900d0f67b3d1fbe789f331e0bb01873bc488e78aa149fb64fe1e22916cbb3dc6a4cc1f879f701e1db0eb573aa81b2e493deecf2c9fd4b2ae0e2c6f5ddcb6de33b67e3fedd83e267690637d9a8ba8b28e7f11005980a7815e311cf4b2111c76bbdb746a8df6054efe15d6d564452a04a8a302ffe4c57cefa843c26b66f16c517d1d7522eb6cf88d6450678578ae42bd0b95c1336989d295975a5bb220e48212c61bb6d8a77fea7d6ce915e97b0f10603aad840cf594fc4fd589813bb3feba1280ab4f2ca95019f761ad68b37639a2437c54d43ccd18929241f4608e219b0b6c39e29448d60300287db077df0381b91733c2f70ce042dbcdb10af0325fc227b69ef6c13e6f42c3b195c901b4664cd285639da1926ed4ebafa9b0b1efcdfd15fe4d4b7c63a2aad10a864a8198586fe971dec2a3560c2372958d235c491ed33963be93242378dd0337eb58b885f30a00c7791eaff95b71dd849e9b9aff3300324b50462838bb61bdffa7569e98b1a1b39345eccf16a6bfe30048541e40e05826465a9b1afb8bc149a550953bf7dd7357a64766e3aaaa555a0d805e6349bfbbc09c1838d23676fa638972e157ae3d6844bd54aa5150981da77f40887e451f590f94fa398e0fe99c5d5e8815b27c55cddd853c47aced8a25ef29acc775023651590219d4d49f69c5400c4c9c338dba5064a035abbd5e958b7fd1e9839d054d33c9d721621068e48ac8176e9ca5906caa32e9e7734cf7818302f4128674d4289a79aaa50aa2efa6fefa29f9cfd7a83b639c21d629d50d15c65bff1dcd43eb675656f2abc169f4e4d7ac8687bf77b494501758daaab58ce53d3a25e82a10adb69cd98858872e16ad2c6cc50d92cd7aba34886d0fd82eb3da045d21fdc5782f056dde7937120b56b517de01b133ac59e9fb867083486a469b5f73f8b47c0499d394528b5cc6a6d083e87bd09ee4dcfdd4686d4e1b29392cb61d7bc1ba8fd50ac05ade0098c814de469e6ba695165de38a4a5eb738fd3873d4668b06a24b81196ec21e5aa3b26a975983b35479134dedb0780f6497db083e293b5bd766a84f53713c622bbcec8464dd7f09ecbbfe6d19155e940485a56e05fde1d99da1efd7588f27bdb395369ff5489b7a64a27a39ea0ecbddf6ff7a476f0739913c1d595ef84347d0d5046b71ab1116eed9b094ac466d216e8ab5a3cd4937c0a55d9078f1d677bc06b54e9ce924cea9efcfefeadf76f988213d25f91a9ceb98dc1575be829a78d033d5b98c3cd05dac0fe36c7e5ed19eeedfbd3cdb68177a28ac6b250d7dcb2d225f4503a86ce3249e975e516c02f8a4d45bccaa0bc00142606d1a6c38e30ffd07b3be944462f48d741d2217582887ac73ed24ec67deba9e2a9eb3fbb4573e3bb190b85252f8c3341e0bdc9bde425e8dc66866c0865d14edb39133b2dd5c0da87014279d6a127e388cc5ceb8be568dbcb6f9b6d50e3c1c8185ff4a743a438d7324f28f3d14b557a15b4061b2546c2c256cacfafa41242a1b37c4262b177c703b67cdf7cad319b0354845ddd951e71848a7e80580c1c9063791e8d85c4d9afa7a37f98fecc50cb2d3ffd813fa35085e81a9a6ed289b946aa8d19e015663be08117332c747c7e8c09be5c2d5e54d66befe15f209fe8e995296b9ab2db0af6ac627f5e18a7fa6cf4def27ae342a9cc1121b447a3af0b93451205ec47f89611ab8947d5cb454d8216d2eaf257aad39b39d438674c397c2f83cf9ea951be88f882df48bed2536f8be94d27c2b4fe7a70d4039c1211400bd989323a817bf58a07716f2e051c42d6657e0fd69842f178eda317516bf3051d796c99cb34d805d8ec816e79ab6917fe9ed83baed2c9461d21dced8d1dc2b8c76878abe2d61e2ac336ddbef44c750ac64d97daece8c3e3a79052ce84acc65d3d21243ec9120ab8629a45855abd3a4f10425a786417da3d7ca67af580e3b7f355acb0994ad9c7903d18e98853e5c3b24c791dc052235407c8f4eccd3ef6932418e37f0f92c22e02f4445aa05ceeaf675703aaa6884925bc25cf5d8e7957f972e4cef060e95853fad1c7339ce22f9c9d6d9de03fb102eb36968d81440b6ba82ad6e750d060bc59b392fd32c6d765c2e4fd39356e808cd019a4661271bd34829019f1039bd7fe8515d65723a63990725bc6ca0bd32ba07682c5a981bea4eacfbd0ed6899416a83f068fb9dd83929d45374b4cb243dbad665d98515758ad5bea3f95ea48bae59a02848b810587f68892f7d8439bca9ca09fdc1ef92faa157ab87d60979c6313f023e1b9786ae9dfc7269cfe6514acfb25fd96addb6600f4e61a8b32e21a72d858bf2dd1b57dad44b9d7993ebb26d64d50f4fcd70feb4053238577d48f1ac14ca496158f8ff8934a0e733065b3f6c383f0afb31165c8e52eed46bb73e76723c505defa95c57700fe1256c5d3affc305e6a87f74b57bf4e2741021656a4486d4991284162870e987737d024a962f10f2c8e1abe8a0eed2415f805abce925290f94357eb1050c881dfd5ec8cfd0ec00606bb312ed1f778e7eded3f7def0bec11cf63a90ca47132c99460200d4f25a974966e531291c98e05eaded6b166df0c40fd2d5bef462b20a0077fbf49bb7f27608daa988cf56f94a1aa17d8aec16185d65c089629d380584daf31cd8ee2eea7630b56e1accf6c9fcc45c2dc44066afedfe1d32bc6733f49efbc5e0e092a0b2dc94591aedc5fbe92fabb1762aef1a75709bc6b8bb833b4bedf9cc82e5bb56c69f7ba00884da5d25e8d40005bb06189e2cfe59ea9124d66fb1392592c670dde6fcb3b9f334b9110caf7e4a605bc628439471a25fab51034e00333fb035e9f64649a90ada8e1464f543d8f0a5bf918186293d14a810ef2e4bf3a12c55f5caf7948eaea2f0f7dba7ddf41e9d958c15bfd7fa95e5aa602f605845b078a7a9d0bcf3bad24aa9a4f9a25b53e354c9b06f4aff60a20e021f61fd480657badc3d3fa9c3d9cdddd46f045589cede49a0fc93acf1aff5f02b07ed42915de421c639f78dd34a186c29b6bd3653efd387efedc557c72be1b4a5d7156acf022699b0a2780c8beca7d4820b427da87e74ba69da3e362c6036358263a6d653699835e0f3ae29d71e3aa5c479aa1535ed45a45459ef341df7df7dde241c610bc2e5476ad5a157636ede5d32556edb377e009acd46f5928513823fabd15011ece1fb1cc4f3467896a86980f12d1c50b853336c962d7ddaa35a14f36c328614ee29e4c024ab1ad1eebf684810d9274bbc9de176970d344169d0de0b9199533217ecd64309f2c71483dde03d651f16aa553bbac19a0c141542c854e4cfc0cd6a8ce3c6605613479e5af22983b9ebbf4fd08a65d715992665d3d26d025b857411dea7cc3c1170cd80ac511ba903182664d0103bb719a42ab64ff04152fdf4fed062ec36d688c4df1fee1192c7e5cff3ad4b2eb01305c70f69d19abf7d93776df487a8f570af049231ac343ae0bd51ba9f206e0a16bfcc0ac7863cdfc40761b1b09a10e0627d4287d9ab4dac4e97ab1ae55dd01e120cab3c5145618c11199a8862793244e17b5fe6a76e196d9c2c71cd3a4198927146b30ebbe9316e213b7468673eb120b6515283447a1efb1c774690acfcc329e97b2ac4b9fdec1853d934b097fdf5c2743c08ea1a3d1d8ad2404bab60e29637379ecf1b0aa9f47f40e9b62365ab887a6bf683035a5fecd22e72e325c2ad65d46c20e895cdc79806d194a9190a4371b6bbcde090baf381755dfa362c5206fd4461c9262fa47b4137c60a33797faa8188e361ea611d70213aebf7f79659244641ff86f70edf80901f95e646cd3bb4a2e98c504571d2439f7793ec98cdf7c365f1966d43b083e1a12565e7aa944bfd0490d14fb65ade129ea8087bc598059f6d98d04f43994f048d015225ad16eae8836acfb485b7c73dec360e1c5c1730e0eeedadbbb9961207a44fef00d24720a3dacd7265f5dde5da23d6329ae68a9e558456740f4087a13b599cd94194a79b6ee10a94bf1c812728dc4a4ba8470fe716fd8f90bb329a6f2ebf5c36a4905d9741ddb3fb2be448b1b21274716e0507dbb8def41198745da6b573df3f61f9f714ec9125f8183bb9848d30e016abbcf4d6a824e84ec90222fa8bd18d07f74e68443edc404e53903bb2825c7f9ce620ddceba654322f075ffa3e5c40509abc461233deaa69813ce9669d1a913d980a6959dc51a7afe2577aa44a5b0a2d21961aaac9e90a203063ac35dd4fd4b297e0d0f645b38bca975796ca9ce53f1a6fd7996fbf2d64320942f6387619754e722185a611899967096c3ee8961fd6aca868a519ed8d65e9cb24deb424742840d41ba72688faef08d3f70bd6421b9e8de944c9724af35e6d4b6971a32eee7a734855c7a056c8df4173ffb6dc689b4ed64e530aa891a5bde0bf0a1d909899b5c89a771ca9e2fd34ff9af39a031e22134b0e6d76d458dd99446631cb8d8c4b0905786f1a5f4d7167ba023dcf4b670a683ba4b5c53f2cb6a992456b31c5f1715a4cd53a3ae4bda7613df1e6e9be4a7029c69530a86885734d039a5f3d05e90b8f377edd1860f881156c780a89b5e01d87ba8839ab1d80f7cd548dfb6329dc51a0e9c0946b3b0a9e3f16b2936df3f9e0cc3555cf88cbae6e41b1d94d697ddca083fe99d94d3ba4133d6ca17a20ee318812c3a2df0540e040125e7b607963228d89157625382", 0x1000}, {&(0x7f0000002ac0)="6ccbe063d0cce46ca86cb8d5056f6d1f7f3f43994ed003cac263a32c5136914705361750e71ebff03acde19b466288d75da89cf7c2abb3bfc309c0fc618a78070899c586b4e1add98b5c5cee926e79fd45b4ef8d1f7a55b853cf977076c2c9e34da486ebbdf431618ad1eb2e8d14d6e2aa3abda5041c92bbf22b015b4369ef5bfb5457f1234b1f744b485eb03af0288d723fc4671f4ef61b730b6f5be53f674b4669ae039986d16ff75471e5e672a1ae0a6f023a2c298ee2ef2764787059fdf7ca9e4a01b0bd6f522206", 0xca}], 0x5, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0x20, 0x4000}, 0x810) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r6, 0x466d589e2983283, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xd4, r1, 0x100, 0x70bd2c, 0x0, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40000043}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x800}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xd17b}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x73}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffff00}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf650}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xd4}}, 0x20004090) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:57:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:57:57 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x5, 0x0, 0x6, 0x10a50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffff66e, 0x5}, 0x1708, 0xfffffffffffffff8, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0xa, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x228000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5) readv(r1, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/36, 0x24}, {&(0x7f0000001100)=""/66, 0x42}, {&(0x7f0000001180)=""/188, 0xbc}, {&(0x7f0000001240)=""/71, 0x47}, {&(0x7f00000012c0)=""/197, 0xc5}, {&(0x7f00000013c0)=""/237, 0xed}], 0x7) [ 1997.415439] No source specified [ 1997.419495] loop6: detected capacity change from 0 to 264192 [ 1997.420580] No source specified [ 1997.433838] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.434664] EXT4-fs (loop6): group descriptors corrupted! [ 1997.442443] loop3: detected capacity change from 0 to 1024 [ 1997.445825] loop6: detected capacity change from 0 to 264192 10:57:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 1997.456600] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.457621] EXT4-fs (loop6): group descriptors corrupted! [ 1997.462233] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.463129] EXT4-fs (loop3): group descriptors corrupted! [ 1997.476573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1997.483543] loop3: detected capacity change from 0 to 1024 10:57:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 1997.507220] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.508251] EXT4-fs (loop3): group descriptors corrupted! 10:57:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1997.552841] No source specified [ 1997.553916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1997.554717] No source specified 10:57:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:57:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) pread64(r0, &(0x7f00000000c0)=""/243, 0xf3, 0x310000000000) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:57:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1997.627057] loop6: detected capacity change from 0 to 264192 [ 1997.677518] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.678995] EXT4-fs (loop6): group descriptors corrupted! [ 1997.696676] No source specified [ 1997.701618] No source specified [ 1997.756425] loop3: detected capacity change from 0 to 1536 [ 1997.774280] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.775718] EXT4-fs (loop3): group descriptors corrupted! [ 1997.797318] loop3: detected capacity change from 0 to 1536 [ 1997.808653] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.810268] EXT4-fs (loop3): group descriptors corrupted! [ 1997.890982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:58:13 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0xd, 0x15, 0x0, 0x0}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3) 10:58:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:58:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x1f, 0x8, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:58:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xae010000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:58:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 2013.256869] loop6: detected capacity change from 0 to 264192 [ 2013.265062] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.265830] EXT4-fs (loop6): group descriptors corrupted! [ 2013.278651] loop6: detected capacity change from 0 to 264192 [ 2013.285583] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.286428] EXT4-fs (loop6): group descriptors corrupted! [ 2013.290477] loop3: detected capacity change from 0 to 1792 [ 2013.304684] No source specified [ 2013.310058] No source specified [ 2013.311762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2013.312514] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.313857] EXT4-fs (loop3): group descriptors corrupted! 10:58:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:58:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xaf010000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2013.337575] loop3: detected capacity change from 0 to 1792 [ 2013.341607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2013.347847] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.348684] EXT4-fs (loop3): group descriptors corrupted! 10:58:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2013.402429] loop6: detected capacity change from 0 to 264192 [ 2013.417950] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.418778] EXT4-fs (loop6): group descriptors corrupted! 10:58:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:58:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:13 executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="bf034e40a743a54c89af88f21b89cabc924d7a99bf611dfdee7c988d315d76025549df24857a0516fe5a7682f2609174ef9861a17941a11193c8a37a57b0776bdabb906a00e3fa616123b4758db786c7d7b56c23919fadf79aeecefbbce57d4ab17036ee482d08e6122f4cc659c7", 0x6e}], 0x1, &(0x7f00000002c0)=[{0x90, 0x1, 0x20, "417bf2adef8cd8f534184df7a16a691eb9323897508dce8b994c75b179d0e1ec45f22641405aac2ead1dfb02f2225e2c2c59068afbc152cc4b258f62842051750b11e8b02fea433d1b8331b080a55bca7a79927a9556847a1ec2418a940dd2deb0613d47df0361e7afb64da5c29f4e5302374c658aa59cd71361792842df"}, {0x50, 0xff, 0x279f, "a0616286b9dae267e2319f10afa82ed599743c74b3b7febdda8d993cf26cffffa1743da4dc3eed71719d94b63009d309785f500a01dfbf8b3fabad07116e09"}, {0x70, 0x1, 0x20, "c1974199a41bff7aedd6f43fa8d20d487c0530f3e6412a07cb29729162427a788dab58e5c8c2b03454c27a60cb7a82c5a578a29ab1c85114762f21e103114f3bf2049cc6f2163cd5a1c7a96ac7016827f41a4c3f9fed573715b13d4468"}, {0xb8, 0x108, 0x57d0, "dc6b69205ce02532b02745665e64e81226ce24beee943a265701f8d339bbe17cbbdfae99280e0d191139ef3c54bf80ed0cae1fe78d41cdd35b909bba633cacc514553f578245f8df89e6eb314fbd6d121382680913420fe4e031c32bff3682155a6d80ed909dc6bf4b632bc98d2c0855597e36d40a1447ec82c37a3de74c7dd66c28a5a7779237fa5277f3dfc7ee4c0b04a857b71a493625bb9a4cb91aee93907d70e4"}, {0x98, 0x119, 0xf9aa, "8d226bcda999031f707fcf5b65422bc7da4166fff293c2573f3e44a294e6376af82c1bfb07478a35625542a8c4ed9afc9c947c501eed66feeaa78cca8d288e81203424f9c6a212e62e6ee9131c92fcefb49e68f228cd4ec1a33b2166fc2366c64f3c877432d560f0ddef3fe49fdfdabf155afdb322ad881ef96b61f1f2ed19140b6c7c24c15b"}], 0x2a0}}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)="95b25010179124cd6a87420d073da75acf56c3426cab472ec5419460d71ff579b0148ff0c40567ae60074ae071fea83d8d469d388297bcb9ca95914463c891e984c93cf6cd417e8bf4b0229556a645cb0c45480ccdcd81b45e64655cfcae3fd4c876f75fa28406b14896b964bd6982cdbbb650611abba8c0169802c1e4bd7438a42f9c3978d51d30fc67cbcf9e8f4ea4", 0x90}], 0x1, &(0x7f0000000700)=[{0x110, 0x111, 0x9, "da9aca825a31b1f6f13ee760870b1ae9217aa1826836532d7ca0fff796f9285875b53c8e235e312e17f69e80b21683536f762876843140d1012cedd56f11b92e03b614c1c1ded16595f0b8bf747a35364102b89b58e0157394713f0e9a21b8e241e6dad7f50ea9f7038f7de9d2b8305be736f633711eba30747149001aae877465a28f6df524e7015a4082551d428c3310dbd6f66bf33e89ec1475c871413a1cc5bd292b9af4bc1f0fd8898c26262dffc6053daf981f7b4d5086776b7e970ec6a664b3dd20c7b016e00f91983f952887fbe4c2e923e3784c3221cc7094fae52e4a958b231534863525d0f0ac995b7dffcb0af10f105841e1f068542a4fdebf"}, {0x1010, 0x10b, 0x4f, "3131eb6ac41ac92d5bffcb15a8f891a5cb2bcf38280326323408f559befb263a02170679f7b4dbf76856fea0982d0a8960d8f155c7f6045c5fe17d5e5ccd0874770ad266fbd7c7a4afbd5d724db6b3dd1ebd5e22c200ce2b461d7815396d5a1351f4c990a2f65d78d6c7aaad12e92b5ccbab76f451c1e3595df9c05a41a5a747aaf1f89dc75804826a2c0b7ee5b47cee0a7416adee2503c8ef0a7760bbaeae6ff793fc4a0b455f6fcf5ae7fc88344a37526275d927e6579af000a8370d711df1feae8c9e4b6e013309a062335c5d0fd5d22d9f6d487c7594d77913a77db4e181d4bb746be3d78723d2c04db61ef2de9b853edebe4590b58ebb4b062683607b5c054ce43566f4318ae0f8851be8e37382be968de71904ee91a3535e6d9aaea9da3c85908da2abd1e2e8846a101567bb3dd205d8eb366cec7f27048f7675b65e06f12ca790e4169b7901228a21387fd97ec49616d24196a24afee06f53638b9d136429d848443ca151937d70a692da6d52aa4a1d21065733ec9b34f8d8c50887ab0ee12ec964c7ea5ade8f3a925c6e937cb6bbaa26a17e6cc54348fe7014d56c3c6285aa4ceef1dd9f20d01febf42cedbc0a194cdf8bf1203765de04deff18b1340a0a92d0c05ddd8a0c0ebad9ab7ebb1e0bad360003eefe6e282d88638e9cdf65f214bad37d23536b00cbb79d949129aaf315f59131a100b3bdc67d6dc6f77b6bc2ab6bdd854bce6527dbc753760ad7e7da9d5aabdbcaa70eaaa8a99bfcf7740bc153bf15e3fdc6d8b587cbaba0bb7a1a6e366bbfd73736f5f71d0ba035e55767d62e82d7b7415dfc8f80467066dd0a8855cfeb57f662b14bf24e3cece05cd90bb0b001daec0ac3fd49caf5174cf431693f3462004b6a6fd65a89d62fa1b9156f69b0c315d5e14f9b4299d59106cf92e7830037f5c068234a3c5bed965f65e20b878922a6fd69221b83a0ba4b26c7b38bf9c1a76c4cbd1c24bc99e659584f403fb1d3a9eed6e969f6fe108c16c82b747ddf80fee492a4b73a84cd69fb7f52c6650f034afd580871689b33ab6d180b8ae9da09c2a8f881ec4275772b734b4300213df05f00d79011d00da5c305a2102fcdce378492c4dde5be65cf12d4c594fbd595663ca619dcfeb1af0ddc05f80bcd473961c0089259929d52c92f485f823d4ed6e3a14e965f5b09b545d329921481dca5b4edc8686dd0194895a6cad0e23a10d53a05524b27ed9244776924cf54de97a23d981adfdb9c6751a8378fc5f6ce6deecfc204ac1d4c575ac499eb965cf6e875429bfa81c26176a0d2104a4764d683142b901b0b5ce2246cc77c251639e3a7a19d5b633ca0b320fbf2f41dd7c4db18b4d109eba8ee0eb0a12c3f7834c5a2ea8acef5af4609d6042bf7e8511e4fd7835e0d4a62ab7dff95c9bf5fc56a12cf7d21b92aec7cc4ceb4b199a4bf428547ed6e8455b199d6210d139562209f39000b3a8ad0ebf1f7c777ae1184c31d544439d7600845f0a268f2cc20a9be5381b20782cb663f95174b27de37716aa2d771c05cf3343e2be5c592680a66c3da882c3064cb75d2f0961218cf33b399200d7f43881092731336d2f7f50fe91dd4a8c915ad30e5e01df336983aee12661c44609fea62527c18a5b451ee1c53d84b40113da4598e993ce21244746564ced1edc3cd17f71a533bdebff0f6e743762852ed2c530082867ebda7d473a9b35d81ef459357a378476e009dfcebf1094012092e1b4d17d2555517c46939785ce13249350c9a4de3cb9195a5189e0088ee21b0375b8496030bcbcec83bf0b755be2a4c1d5606445f28559ee051556ce5cb87f61041ae15f0a26eb5fbdda6f9eebb70df78b1dfe478a6d45aeec6873b284cee92d124bad6449beaa7ddecbf351c281019e7c20acdc9bf480680e65a8aa48a762cc04bc91e9b2dc017283b09947db206dba96a21c3cb4c63026620be933855aa4fda4d7b0ca35750f9f538c707e4afb1cf7d5f7be9d6febd1ca4e6a517f40a72e98c9901ab6be4d5ab43061b1d65b25b888fe72145a825f997ecc889488ff6e252c9698104c083c00bf807869db114596363c2665852ceae6b4fec4bddcd83b26086e7d1efbe57230a67eea42381ce37e0771cea0f1b7e72a26f1f2dd263f23e2831aa4e3648648df20c45ebaf4bd053f8344b8614b20f67adf335026ddd6cf80ef3bff361a89bc808bfdb434a8abd90630ec513b80199917d659d0ae672238112ca0280d494bfafaa5f19bd708c469cc51630320539f019e93ca7ac1efb863be096097b35b9458316bb327fff4ae70fbe1a2fcf1fcf3404e1243bd06cb41ceb07e6e4f4f1afbc442b791532425656a9ef89b2ae845294f9b8ebc15870c6383164d6002ae2296c160843831d178296e1e3aae88c35ea96ca9b3dab1082e13f3b87b9f3b2961899bc0cb0bbfb3ce2af036296517a1478d3b99303ed1670ba85bc227811f24b3870c2e5038adb5d43e9c81200714a246bd6fdd75c560bf8fbcc0f481e1b7679a9586185e6e48591a134df02f548a1698a84434de2032d2f2573234024874b099a30cd0f8166deb6cb5f5b3da24b636ca9169c6605aacd4d8b9cc6be7e5bdce50d56b056e69f1566c8a46cb61e6550649f255555c3fe1a465eaef7d4209ac6361004bfe1252d5e01dd25d359369d4ddb5e0fe36468119e65cad1dd1fffc844c0c23eeaffbfcb35bf2725fc64b8c5c96d97841733f101505a8e45e97a134389f31f3c3bd6a5aaf77499d7521826e1cef4a1727397ee9e0dc1a1f8c3a22f74072863abaef2d647408d34e81be5f2dab77de37b9b232c6e4f34928dffdeb0125e1d6bc9ccaecbcaf5fb1f6c553a82f3fbc94af68c66cba9a1cf67b5d354ac011db509418241dd777371aa57559e2f3f611f9fa2ef4d4d702c14878486a96b774d61ec4a8f3c5469a0de437ed786028bdf9ed8499c1cfccc44ab397dbfe125733a21c3cc200355aacd4e1cc27d3edb696bf86480f820751471785806cd9e606d9c99c92d18619bafad6517b2a62b20a7ae784578b1b216289a3c6dd633c7182afef6772618a33fac5b29225b35ebe51281455953bc4f9dc9b2a7e2a837c667399a5d2c472f764caf71dda12b0affab4649c2e33826787e51c9f2fad5b7e921a217883a25892fca6e9d57a9b0b6ddd1ff94d75c688cd32ea7b3f5aa20ef02cae6cc663a27a615385fb0a58b3b7c88915f96b0b16581b870233bbb3350d02c3aacd6253561fecfe9e8c0236649997e3d3937084cd3dcbfeceef955b0e6de0f92e1d579b95baea00948ad0fc48be61dfbe58bc635a6dd922a6bd95a6400a14f97f5d6180e9a2e9fa7d72a87950190c0536f98a6f8c1a47c5960a2c91a2b0a9c5951e31450c505df04fba513ac3808c3e702d7261d0d7afb64c8ded3d93af2cbb26bb149a913873319f4de669bc913d5127c96a70c138d1d4d0cf9e7c5e919b347c1f88f9c0aaaa3efb2307a4c4f5f562bb79e3983829cf37567f6d08b99ff2b9a717c5ac6a31a4ba5dc53a718ce2eed866f7d75971e89f14068d3682986d0b6a616bf561646684c9f6366db1aa684a8c7935463eb515a981789ba3fea74b690cc1a53b6eded3c27636898d4928669f70e08a17797a9f8ed6df7aa621c2aebc8f244619bb3fbc6b3072d7b2e3ecccbd1e9495fb8f5547edb0e587d3f9cc36a972f5903f78f0255a85d1f66f9c7ba3a234292be210e9b01f94949a7923d68563cc17025a1e77a0282f4cdd14d2070ca3adbba7182b740135350310f2d9733e1743a3564c470ad49ce6405a72252b0c1f556920a8993453083005da017e35bab38494c9d5a742d16e2c71b5b15a94327f41db2b95d10952a1fb7602a89801aeec0c4c75067669be337a222cd0d8232c41fd349eac2d2785530744018c17d4c9547178565f59cafc1c99d9c92f6c35e71b5c8275c18aad2960516510b4984526debe262f180ab1ac8a74788675b6bf57461d715dd37ee1365ba782c5b92aa496f8b9a2690db9d20d8c25c0b4e5313d307bdc7871cbd033fcef45abb22254e2dce95b7b6b099e09c6ab73bbffe087b194cfcf7c50ab55c11bac6cc98db9a4a98e775d019b7f4820d6aebe2096d0edbd6e79375f9787175c33aef70ed238233ff7f5c1cb1342ade66e01c9bfd40d4b97e50dc59c6fb9a6a4e4073393e600b22f4ff59ea2daa1924c1e5d75b2ae53519741bfea8e1f2961b19aa70436ae47541b4df814600c60a2315752e1a5d74d7c189ddd5c29cee6d74e097480081f6a64875fd778b849294d559ab6e2552a6b48a9121a7c3ae2d72082acd0ed6978357dfdc12b977c1b7f923547685b746cb5899e3a999a3809b7402480d3d0f3d59f2f56a210ed3536fa3da095f0b97ccd47361d837f6fa189c28f92612182b2f7378d9e389aed487de32046b8b6e58c1963dccd3d696290b1a9beb3b348141f5ffe97c32a918164a7bf8a299381d2e646d6d20b38ff57e72904f9d7bfbd8e28d6c8938c79edad8d6942c6c3c76411cec1b614fffd069a67b6a2a7f5c42ee75193ddd9823167f365dbd8a9cc0f79d939f3727c65c1742eca94eb8b426bb2e2103bc229e70b1dd6fcd83da111e9c9e3d15b704e60beebb3cb7837e4a3668c55f2a8a0b0ba3fd180a27605e1abeaffb4da7a34857096b5409950e25da05ddacccc56a8a1035c96bf46108a29f1f0d942931ad2d9b07d12f6b301ec78e4d742de6e2d04b7287a36e61f4e70210e67fb060dc4bdb25b98af457be16411c2f3ad34bb08d52bff6204f7b600d38d8baefb0b5bd2537d64b9952d530a089059b70a1bf630a1b8f39bfb8f81a8cc5b6b3e27c0aa8516adef094812df4816a0c0853b14a89f717b7903f291c0f4d2e6f763e57e331e17f5d40856661f594976b3b30d1fc3f116a8f1d94881f56154ac6ea147dae7321b9f6e41f0d4541121a9b5786c3356e3a81bfadd1e85ca49ed1c61f119e388e1198f8850426d7e83ef99e4b0d0c8b6198eb0465670a6c71e261e42a5304c2a0ff448a5c8057de05c1cbad5a32e839aeb3c53c57625681b3af33e7bfdd38d6b1fb84fe2c34714de7f724bb499050fe0ea7eee17b881730323b41dc047c8f8a5bba91d54f5c660a4f615ce3a72f80315682935122311578ea52eb9bc89e5f26f16518e3e19de3fda8d21663a5c9c64738150514e90410138c2ac3de7b2128e88abca3ff39d26238938f8f0dc4f1f2ba639b46d500ff67d49d975b736c13eb7e1efd58f0ef863941b8374754818f6a8657aaba62e6ee59ee3f279902f7a98992937cdd3d65b3bd9439f20085fb6c5572ae5c9eeba0fc3657c13ab4b3d474b528a3dc5a354fa3505aedf33c4dc1f7f42ba4184a5f975fdcfd6b14ab35158d2af8a7c2e7ead4ce0e86d69b62be2619c81d007d9768a0dcb6b49c905e8ba4f8c68870d57922549a4effd06c6359a3eefe3b92d499f4af0aa33ed0c1084257e7ce66b6128df9d036c5cfb3b0857845c9dcb91567c535d268678e6aad7c1b92a37d27d59fda9cbc763aab87102cf179746a25907b754eac4c9145054a7235703af2f7f466b10ce51870413254b91052a8080ab8d62e2ba3a733562096a0768d7451ce053fc0005ff45726ebdfb48bad3f5e9b0b71bc4e103e019a4ff10f0144324427ac8f8006fb38c48a8ec82d34739969ec9daf0c16fd1dacd821fea8b4687776fdc4183b8f80212a2ad92b46bc0786bf3f1fbb94ea7478bf5fa81b63b28b18db260c23758ae4fec1d2920380e766e689690a1151057f5ced659b21614cd2a3c73b3fb9747b88ae21f8c6"}], 0x1120}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001840)="34c3f29526f43df6f39ea133836b41268c4d2bcd1ff8d6e18b7dc95f545064732fffa116f261daa336b21494afcb", 0x2e}, {&(0x7f0000001880)="b95af122b529466d50365bd74d7add2bda9bdc31ff12f8ee5abaf8ecceb14a1c20147aa1821e9a793c2a05bbc5c138009ee2472c95fd48a27c7430bd8de13363c44aac7e870ab182b87c7947a50da6a8509890e331756d4178d77b7c290d664f0024549eecf43ba96c6554b5cb0a797d3db1a36a0b0c4c51b451a6a8", 0x7c}, {&(0x7f0000001900)="f4a941ae45e960564067b00c6ca55a31da980aee3b8ee8f6c8c2349fb2d0f304de3c78ab8371aeba7896ef6fe541f59f33d1c7865b793dec00fa2b057891ef791de6e84fb6b83df126579ca75db828167697dda51478bf05e2327b6a012ac890d1111d27e4ca4498e3e6daeef47b606ccba4978a647ed5d44ca029ff75e17a5d1af1", 0x82}, {&(0x7f00000019c0)="c16f617ad114d2bac994678cfa50c292fe6cdde2fdafc1ffcf13034d0053bd31cb4e12c85bbe139bdacdedddf0b9092aab265c6a3a456c5da39327ef132cdb17635acdfc5201ec7686699b49ca8a807ee6ee981c3035970beb22347c482b354d5a6c20f452a5c8f4f09432f6cb767201eb7e3941f3de9bc4efbe026ee3efbe89827b4d7ea56d62f9515ea53bcbd76c51ec1cb676d6072799e1f7293619590b4d2fe60ee1a777bf4df22e8e104ff9c7bcc272480969a6f1b417861d4bc251ce82943dc77ac927607912fadc16cdf2ff4cd465151225005110d42f25da8fd26d2536a3eade0e78387287e907", 0xeb}, {&(0x7f0000001ac0)="089b5c8aa340fe498c790c568779ef1a226e6340a7664f2010655b6be4682c43ec0a48afd4fc9b3360a55e91d0a7456ecc4b402065a4992964d468fe48c640967ab26fc241b0698e427edc01593b08bdd801008cb2da349a99bdc217c226902a1f3df206917f11e7b1b8c012e654a3bcac35a72d5be9528b0de586c84e0e17245c355f525b7bae4a9197a63bb1520b4617f51f85f7766cf99a608528bfa1502b1b5387cb1d", 0xa5}, {&(0x7f0000001b80)="2aefdb84c26a867756f45b9e9f6ff24f4fcca688a07acfaa3c3cc29c2787b822f3e95a587e8f34a397b4b1fe1bb56fbd5bbcbf90035bfd66bcd98ee08f7ccc70cfb71494ee85587b37e8ac2ba57cc3316df76b0609bee57d0efc0d2d6bad13ad2b08658bc743293829794917023a306e2ece6fab8a584075759bac4f40a1925598a154d488cb507bfaa54739d62c99429019cd74076785ea83450a4603971f042b8e9cf8cf59e4677a44f607a5288a5882bdde49ccfed2932257d7d5d95203330f7a372031b40d1b16e0ac53806294e3a27b4c289ee0", 0xd6}, {&(0x7f0000001c80)="aba2850f5998148bddf88a164f62d5562884721ab73ac1e56c649318a20c1470c31c7cf032bcd8573ef4ad17d2cd2c427eae54c870cbdf4cb15876cd8cf506f53de3f4bacfa58a5b3aefdb04e8a5", 0x4e}], 0x7, &(0x7f0000001d80)=[{0x1010, 0x1, 0x5, "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"}, {0x58, 0x6, 0xd0, "df3c9484c77c42208a3f70f4faebd61b03be5aa2486756312ca012fcc42f21b4e686c57478df6b682bc321d367ffbbc80c4724c37b1101ba120cfe87c43d320bbd35ba5c623a"}, {0x30, 0x10b, 0x80, "ab6af1a43d050eb7fb07be90a7d276c0feb419dbb3661b04649e1e83d318b3"}, {0x38, 0x3a, 0x8, "9c996d5ac28025ec135f42427f134504862c9d734ec113d59f538260b2c68879329af3eb"}, {0x80, 0x10f, 0x7f, "a0d86fb4ce76fbf21550ed83ac4d272c03aa304242ee05ed59e37d97c2563cde0ac3014c28a44e10c1c9414560dd0cad5e2f1975380e1aea89323a1649e7dde1f3989cc3303f02a8ccc4df201772b4bb2ef45f61279cd33d66ccf918c62fd6c75b9fb095e297a4550912"}, {0x98, 0x3a, 0x8cb, "5e49662d8b2a79f687400c4aebbde05abd612a2c5a04054e863a9638ed11346c2a378147d9db0f651fffbdd91df7bd191bb05b07241c05be9f6cbdc3034b414fd2a5ccb1ec32abbb0422fa7a7fe3df4a5d9b0ec7873c34dec18dcea950f06fef46238bf7f2157187114fda942d646c76ab7d039a93b056345231ceba525049781bf6"}, {0x1010, 0x108, 0x0, "9e7e150192f40865e30ba70d8e7e7e97b45bcd9373e82945079741386013854b8b6496876fa847fc47391aa4577161cffd1e54ac463e6b43913b13db8de69d1cec43d156453b9d1532ed021e7c14bd604df4ab1b395c5908f643ad322f25a2c1be51df348505c5473676f23f87dbbea89ad879fd79ef8f05af097e5d96b83353de1b0e6ebd34c81c1e378aa604fde9170aff05e006a8876707390ba7571efd2df0e64be46946d3f8d07a72ac0348950c1ffc33529de22d9d27ae5b76b2995894df060a9bf11a0d22e319d2beb7c8511b2e656aa5bfd67a7930b30055b1298d8a725c3794b2c1348db10421700fd58d0da0eb9926d30db8ab6fcfb675b81dd15ae6cf6ff4e30d9a3337e2d5d4b838167a18143f14b6accfbccbfe0f0cabad0151af67d8c08a2dfd2eca7dc765d5fa81df0e0b8a839bceeb897b5b7f1f2b830ed51ebe322a4c9ac0ccf658c38d0e28d9889c58390a06e771b770ac766dbf5583712fc3f09e318949ddb5446bda35da55e504ad56cd8d69825c098db2d1494bdc0ad13f268abf4331d4668d162bbcc5d1a98ced35f8f7f06edf6506146b9a9d99ac474901aeacca87a77f7aeec6d64b7d5e548dba884b353fecbe00503a08a2f92beeb7a1895bb0328f538bec94a49546cc31978968e55848984d5c0f5affc4133cd90fc02806ea03d57d3502868f48617a9ca7c962cb34090d69c06a416fcdafaa045d04b5d72e15dcc7748e56e176e1d4a6271e429ab0be8766e39edaf6b3b3965df75f9cafc47357f900dcd09a7a5752411e571fe31625f0443b04d8b5af8eaf447a8235009e687e3ad28fd150f93e612567374e2041cc95ebcf093e13e16d7707b25accff0f4c55c317ba05eb3eec38cdfc5763865ace5075f67ccbedba25e0499a34c675d565ca9624320942ab1bd92925eb6dc92b87c2107a69a41259e2bded5d437a349505a1cc6825908058fee7a1f3653a0a06d37eeb2dac1deb780d3bb033c13f8e107c7662b03fd815c64b930368b51a78ebb6e298d1e9824cd8e925e84005479dad7466cfd7031457e8db1e3bdfefc7d08d520b0e89dd59a48c755261e78c32a99e2cd988db6d6d8904d9cfa738b0a29704cc3c8a23ea41f03a0ac0dbb0c30f5da7d3a1a038a155a247cee1fcc89d1e732a3da30bfa558efa2705c9af79b209e118a3d7f566ab14ae42bd2e9bdea05542b84ad84ef14748ee22542431955c1a5bbb750477c0a3c2772a5b858c46c61078cfcc1853d32366b3ed8f9ca0a6bce191848998cd3c5c51c66f9a33ecd31dd094605fe12515435d8d518039985c4f37088af87d1bd40777ccebe17e1627684a62a64d754e42d6e4e604c92daa919197c454e388c25607e2f7405d11e807014fa8106c850415818923f2d11cd22af3745ea9bf1c6faffda5481d8175121e39fd370b8cd96ce4439eb1f19523683c8d9b915735d185fc4fb3a521ebcadf1b70d767e98aead9d9167510822fc88649c10b52ca931fc876b78fd737073c576519a868a53f20feaf92a019b684a7f1bcf0a30876ffbbd90d80e4d65ba2a27178dc7e3eea250d975fa71be15dedc18c9f9378845894124ddd4729bfd0f7fa4c4fd8f6ca1a42dbe7169a99752ac0b97debe376d4ec27c61830a3bde00a40d1baf7c5a0f7b674ced4d2141101541fdead6e081e6ffddf9ab3b5e79457cbb3a6a1cfaa7079d51fe34c24121b593a63e83170f3675aaffb108c0848c222d23c972a02f517f293a4597e3e22f59c1d21a7ab1dcd76240ddb02a9361ec4343eccfa42be98bca0e56cd096d8530ffe2adb6fd256986d923dad58429175c3f6b0d83716cd7798a165d620fe321a3b2cb25d9bfda15afee7e35fed9b19b12b3c5b1633313c643af608ad2cf1b1f90467c05cef7c5dacb655dc0b0ff701c4ea89f5d4bf87e083c0315a810e44b66724714cae0389fdaa851c6ac4aee805cc311fba2c94fa3c412b7c50941f35381f3863ca90d2ab0f5f359d9dbce214896b3de1430bbc811a0a56a0129032c06ebe9de5e6d4ef4a6d00a6b89b8e6a3580e6c353be83babd4ec44bd6b9d52e8bfbfdd6b6abf0e43bfeea062befd997a4f0e78946b5c0f02ef8806c3726c74ee3b06efbafb26edc3de7e3869c7b2c7295db90e86537510d7ac9ee61d784ee0118ed94ac16b478645792f5a146986288a49e501ffbe0a9f1963ba0fb14dfb2fb9b18765bc7bfdd82c8a7653cec85ed98760514127c8ac345a2fef1020e546964021da2d41e0d78e85e24b1c2e4b6241cdbee574221e9356f0db55ae4c2e2b678f43b9f75db1f183cfc147c1518672c070b946a0c465c168e1ffad4126ea7549d87ff7bdcb44f83b3debc4894f610705d96edc7f66f6a06e838c5b7c7dbddbdba92a72a85f466ebfc7971be13cca0cd6940415395f98788456827eb3e91dea826c9dd9bc72041800f5950c648a36bcb230bd324bca6ada63c3414f4b5206ecbc1ad3e895cb3066e3edb116e54595eede07f876e4f06f08329d30387db3d114a0145aaec923c8415fe7c82e75d5fb71ea2b6ff81eb78ca5a1a3402026f76657bafacb6baaa5a5ec9db618aa3faaa0ff03f03e3da992e04570785bdbf57cf91de6cd799fbb12f9d316f6370751610ea57139b21e1d613ea08bba6f7e051a75186bbf52efd566dfd5808c5a623ec216f3bf80a69fe9526b3562e0a74ad1d7aee872a3925cf97bea3f8142f79f8bcf5ce94f0b6382ab738ca83b4ef42f63f9ca33c610f8ff12eb6cc5a8345e47b0da3e6edb5bc5691b47ac82672ddfc32f06d4eae121fa766c4e2a88b124212ac08a9558c912b950ebb824dd67a4b9b7c4398388a015b2a0b88863680524b94499252dd50df4a187c6ba0bfc3f059e6680e67e990ae4e3e255335dae0ce97d4a94077cb7b7f812b6e4051c03ed34d40cdbe1635e5a99db3d5389768af96191e082e5e4ffc1f9f9440005f1a4ef8d3e2f6da21725ed4f072df8a4b9de094ee68445bd3fc047447688160e881abab3951d24d9affeb70002fcdf88a8c4e5f4d9c9826ea0ad92b5a464ef93617efef4365a137ccd46bd61180c5c65503361ed66fb099a36786fe304e374c2182e99b13217c07115f32970d590d48c4b0b3e2d9a005dbf5c1c0185066d21318eb3b67399fc83ef05a5fe1f05ccc6cd39205228759114a579a55b9a78ab3ac21f836aa0c17241bb0fef21490a772c30b0501b436942f7253099521ef22217bf38d1eb817035c24701097e387749e71d18cbc3c6117f934ae3452d0efa1d31fdabd2048f583133a1f1ff1445d1df28f81d1cf98231488702ae258f17dc2707be63ea5e3aa0dd3299c2910a95e29f1f307ce582a0941364f390f53dd5b5ec1e57bcfc7b4977644826d1dfd491f34fabee4fe7f272e20ae3104b8a2a16f821b46c2e5a68361500b0e8c65b986e115f0a858fff25179e7604c46bc146ebaec19f3cbac0bbbdc95c7802b81d45e972bff67ea53f24c0b88378df16872ceb9ef2f2032cc6b5ad9b9f1ac2d7c7cb5474ebc3f1170f3000e5d8ceaae2b53694beff2f21f29c1109734778c38dfc48fdf77217250190c662304d31ae945eea94cbb5eaa8e8fbaf0f62dd3cb15906aa5b0e151d7474d11649d9311000b5ec6543919281839f7ff9a39940867835d4772785566b5c765cf625aa28cbc90acb11dda6bd975dc574c1b34a05721a8b4e4b31c884bf7b26790f077f4a02606ed095bc2db9491b3cbbeb11072509d39cabda21b81b2f7c05b9d5e8941b7bb4ee89d7f748d744b7e22d1cd68fcdfc566e961405545bab3ae717cbfa2697e6a5e8985581a211550c3a7f7c53370c282bfa59005e19a776590ab41fa2321f19a7d2ff61bc6198be8e895ff2b9eddd5d18cdcd873fd87e7baac812cb9f671e0dbb706a7d7fc9547f356015f3766af9458be190164e910b647f65548977f48ce1af4bfdef4de16c343f439b42087a00be5791cdcfb025904235b42719390fc09c88dd5a9bb0b83f469c282b54a0365d1015a6a3fb7b00685fcaa3f1a87f34bde5f01d816eefd2b0287aefd0fdc7a7fbd3cbb83c041c44d2fe57bdd0c83af6312ab2b3ed5d3d63d043e84d120a7f4d31911379ed091d0604c661e6f0720c90aa6fed28b9aac44efa08cb5e0a393e29c7cd6da402dfa9d671cf61d4ebbf5e1f16c09a8bfdadf02c5c1a0f1535526cd76931b946e32e4810b151d1e1cd101066abffb911282ec63a37ff2345760d87167a45eb77a79154fc1d76fe668bd2e4c4d0eda892f7e48f519cdaaa053058d0902806d41708d89eced3e9ff34952d91ec7fcdb15d388bc51030381f40111252c46c9fa9cc81e751fde7ead97e786c0a8be2dfc4deceb95ea327a37f0c79c4b4d82a936450a8bf009c8c206dab682c3a78f507f2cadd48aa6a2f8a5256b4fb1bc6bd7173fc568f5661e9d52a1bb6333e04e9aa781a92c0dfd23f7bd7435ce03b0822f283c95e386b527144b8c9535bd3b05d3246ffdf20aaaf979865d1d0941b4d171295b1afe1302aaa568f28443fe356f590c828c5d076676ddf94e6a69ef95391315be8d72f6674dbc73078244cd1a6e9d99089dc9f5bf169dc8e8dccee2735608f9c54fb49e6d159a404ed2b6e91a2823f24655f9eea3c40d5692b836262a2b1375c3eb6fd38eafcc7b1c1c12a7f7886cdef6c7c9a8ab023d0246eb0f8649e049bb80a6d86956c969942d35fc34471ee1462a92e4e48eaac667439612249d7e90bad9265fe91cd2ec27b81c8093bd2e5e603dece1888650bc19073aede9733ce80e992e12be9a5deaeefb6d03cff98a85ccd71dba460c2962928c56dbead4eb3314c45ea52f6701475300e6c95fffba4bbcfee550ef09aa91d7ce41e039230c062e8fafb4a31030f523c578a4fd8c933173027209fb3e043253650260bd7ef2ab148f43ce2254965c58d65aed1953a8e43e53946048336c8c4145282939a1347fd438d92f9a560c7cbb38f0fc97ec1a55da8460fcf88d0ea24f20f165998696fefd3373509656bfbb2ba44dad17179634bb349eca72994f50becf7142e01e8aa4004d29ab4ab4c0205c1e18ec16f009dbdbce03933b0cd6bb9eec8e0e6d9ceb7d99c0a3a834a66619add001c45e72ac5819e9586f5502ea7d8c7abeaa8a963d9ba0d0cb76ce75c5f0af635a130cb06f17fee121ea63c19edfdef00c933016c2852294f592d9248bd7f979121684a902e88000aff49062e138381a9c3216e1a8f091c68ad65ab7ccb06b8d510588c8738c33db63395b4609d51a8f1429606864aa70396a686f1adc57d40ec936410b189a2dbebc50cb464c54d18da55d9e9c83d021d4361a157048b718d77ae5643e7558efd22be3d993cf92dad94231b1695e44b1f58373fea3327695d464ef9a08dfa2818a917bb60d33b80a950e3d43512bacf248a79532c056c35840143e5d4fbb24ac9e171e6a6152890838ecfa606df802a12b82a10051a7160a70a2772895bfdec4eeba914bf8b3bcac650627ee8a85221c05592cfd05cf6599a98d66a112021c91679a7321d1b3c7369a72e05decf92b98a4b98a402d2b320d13ec41da4ef709afb578da2184eaf21a908c37b40239bcc2a7609811624f08f1559b30ef4540082e7da8125dab74e6b8a67a3a78c4b1822561ed21d4b930f7d18893e423ebee31818df3b075997c6fe32ae9b40a2d3e2c5e8c63ecb7cc8ea054b857045d59e840cf06252624bf021f865ab8b3087145a3e89e87cef30988f357527e40be449bd14624fe7eb203d585db9835216d8db4f432c558b3d04c698b8f64832790"}], 0x21f8}}], 0x3, 0x890) setuid(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000004040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:58:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 2013.497470] No source specified [ 2013.504626] loop3: detected capacity change from 0 to 2048 [ 2013.517479] No source specified [ 2013.518836] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.519571] EXT4-fs (loop3): group descriptors corrupted! [ 2013.529960] loop3: detected capacity change from 0 to 2048 [ 2013.536773] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.537596] EXT4-fs (loop3): group descriptors corrupted! 10:58:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2013.681588] No source specified [ 2013.690622] No source specified [ 2018.949228] Bluetooth: hci1: command 0x0406 tx timeout 10:58:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:58:23 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x78, 0x0, 0x0, 0x81, 0x0, 0x1000, 0xab491, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8138, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:58:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe8180000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:58:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, &(0x7f0000000040)=0xc5f2, 0x8001, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2023.305726] No source specified [ 2023.306764] loop3: detected capacity change from 0 to 8192 [ 2023.315301] No source specified [ 2023.323257] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.324326] EXT4-fs (loop3): group descriptors corrupted! [ 2023.328041] loop6: detected capacity change from 0 to 264192 [ 2023.331809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2023.340775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2023.349359] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.350435] EXT4-fs (loop6): group descriptors corrupted! [ 2023.350895] loop3: detected capacity change from 0 to 8192 [ 2023.359373] loop6: detected capacity change from 0 to 264192 [ 2023.364583] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.365564] EXT4-fs (loop6): group descriptors corrupted! [ 2023.369049] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.369984] EXT4-fs (loop3): group descriptors corrupted! 10:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:58:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:58:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe8ed9675, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:23 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) tee(r0, r1, 0x2, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x24400, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000340)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000000c0)={0x20, "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"}) 10:58:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2023.451236] loop6: detected capacity change from 0 to 264192 [ 2023.460812] No source specified [ 2023.463434] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.464228] EXT4-fs (loop6): group descriptors corrupted! [ 2023.469580] No source specified [ 2023.473741] loop6: detected capacity change from 0 to 264192 [ 2023.481257] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.482022] EXT4-fs (loop6): group descriptors corrupted! 10:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) [ 2023.486251] loop3: detected capacity change from 0 to 30847 [ 2023.497005] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.497969] EXT4-fs (loop3): group descriptors corrupted! 10:58:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2023.566616] loop6: detected capacity change from 0 to 264192 [ 2023.575332] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.576209] EXT4-fs (loop6): group descriptors corrupted! [ 2023.585416] loop6: detected capacity change from 0 to 264192 [ 2023.591565] No source specified [ 2023.591733] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2023.592668] EXT4-fs (loop6): group descriptors corrupted! [ 2023.593600] No source specified 10:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xffffff1d}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00@', @ANYRES16=r6, @ANYBLOB="010000000000000000001a000000060021006100000008002280040000800500920000000000"], 0x2c}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000001c0)={0x0, 'batadv_slave_0\x00', {0x2}, 0xfffa}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:58:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0x2b, 0xf8, 0x9, 0x0, 0xfff, 0x2006, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf80, 0x80}, 0x10804, 0x1270, 0xfffffff8, 0x6, 0xdc, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r0, 0x3) 10:58:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:58:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 10:58:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2035.023846] loop6: detected capacity change from 0 to 264192 [ 2035.042766] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.043808] EXT4-fs (loop6): group descriptors corrupted! [ 2035.054457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.058060] loop6: detected capacity change from 0 to 264192 [ 2035.059738] loop3: detected capacity change from 0 to 32768 [ 2035.070376] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.071488] EXT4-fs (loop6): group descriptors corrupted! [ 2035.073796] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.074910] EXT4-fs (loop3): group descriptors corrupted! [ 2035.088374] loop3: detected capacity change from 0 to 32768 [ 2035.101972] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.102953] EXT4-fs (loop3): group descriptors corrupted! [ 2035.104040] No source specified [ 2035.115028] No source specified 10:58:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}]}, 0x38}}, 0x0) [ 2035.135044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:58:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:58:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0x100, 0x1f, 0x1, 0x954}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 2035.219293] loop6: detected capacity change from 0 to 264192 [ 2035.230508] loop3: detected capacity change from 0 to 65536 [ 2035.232140] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.232975] EXT4-fs (loop6): group descriptors corrupted! 10:58:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}]}, 0x30}}, 0x0) [ 2035.244254] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.245132] EXT4-fs (loop3): group descriptors corrupted! [ 2035.254566] loop6: detected capacity change from 0 to 264192 [ 2035.256314] loop3: detected capacity change from 0 to 65536 [ 2035.259909] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.260840] EXT4-fs (loop3): group descriptors corrupted! [ 2035.264246] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.265071] EXT4-fs (loop6): group descriptors corrupted! 10:58:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2035.307007] No source specified [ 2035.317638] No source specified 10:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}]}, 0x30}}, 0x0) [ 2035.381265] loop3: detected capacity change from 0 to 98304 [ 2035.391393] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.392306] EXT4-fs (loop3): group descriptors corrupted! [ 2035.401241] loop3: detected capacity change from 0 to 98304 [ 2035.412517] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2035.413260] EXT4-fs (loop3): group descriptors corrupted! 10:58:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:58:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="050000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:45 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f0000000280)=""/87, 0x57}], 0x3, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x1, 0x10020, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r6 = accept4(r0, &(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000640)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:58:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:58:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}]}, 0x30}}, 0x0) 10:58:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:45 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) fcntl$dupfd(r0, 0x406, r2) r3 = open(&(0x7f0000000180)='./file0\x00', 0x14001, 0x6d) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x20, 0x2, 0x3, 0x0, 0x4, 0x40, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b1b, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8100, 0x7e5, 0x6, 0x7, 0x4, 0x7fffffff, 0x0, 0x0, 0xf6, 0x0, 0xfffffffffffff000}, r1, 0x6, r3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='{\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) [ 2045.080710] No source specified [ 2045.088610] No source specified [ 2045.114949] loop7: detected capacity change from 0 to 512 [ 2045.119160] loop6: detected capacity change from 0 to 264192 [ 2045.123782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2045.126522] loop3: detected capacity change from 0 to 131072 [ 2045.130152] EXT4-fs (loop7): inodes count not valid: 5 vs 32 [ 2045.143772] loop7: detected capacity change from 0 to 512 [ 2045.147408] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.148147] EXT4-fs (loop3): group descriptors corrupted! 10:58:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2045.157544] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.158369] EXT4-fs (loop6): group descriptors corrupted! [ 2045.164511] loop3: detected capacity change from 0 to 131072 [ 2045.165482] EXT4-fs (loop7): inodes count not valid: 5 vs 32 10:58:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2045.179652] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.180396] EXT4-fs (loop3): group descriptors corrupted! [ 2045.186531] loop6: detected capacity change from 0 to 264192 [ 2045.198263] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.199626] EXT4-fs (loop6): group descriptors corrupted! [ 2045.224615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2045.225838] No source specified [ 2045.229957] No source specified 10:58:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0a0000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:58:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2045.274589] loop7: detected capacity change from 0 to 512 [ 2045.278926] loop3: detected capacity change from 0 to 163840 10:58:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2045.282572] EXT4-fs (loop7): inodes count not valid: 10 vs 32 [ 2045.288350] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.289105] EXT4-fs (loop3): group descriptors corrupted! [ 2045.295938] loop3: detected capacity change from 0 to 163840 [ 2045.303353] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.304146] EXT4-fs (loop3): group descriptors corrupted! [ 2045.316063] No source specified 10:58:45 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:58:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2045.322875] No source specified 10:58:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="130000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2045.428353] loop6: detected capacity change from 0 to 264192 [ 2045.447251] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.448660] EXT4-fs (loop6): group descriptors corrupted! [ 2045.469996] loop6: detected capacity change from 0 to 264192 [ 2045.475797] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2045.477388] EXT4-fs (loop6): group descriptors corrupted! [ 2047.824959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2047.829662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2047.831886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2047.837401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2047.841682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2049.925182] Bluetooth: hci1: command tx timeout [ 2051.973213] Bluetooth: hci1: command tx timeout [ 2054.021184] Bluetooth: hci1: command tx timeout [ 2056.069224] Bluetooth: hci1: command tx timeout [ 2066.160164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2066.161466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2066.206766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2066.208320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2066.362195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:59:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 10:59:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:59:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:59:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="140000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x8001) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/11], 0x36) [ 2077.671989] No source specified [ 2077.675281] No source specified 10:59:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x24, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2077.710619] loop6: detected capacity change from 0 to 264192 [ 2077.728009] loop3: detected capacity change from 0 to 196608 [ 2077.730751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2077.736329] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2077.737867] EXT4-fs (loop6): group descriptors corrupted! [ 2077.738695] loop7: detected capacity change from 0 to 512 [ 2077.745495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2077.752590] EXT4-fs (loop7): inodes count not valid: 20 vs 32 [ 2077.755219] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2077.756412] EXT4-fs (loop3): group descriptors corrupted! [ 2077.770986] loop3: detected capacity change from 0 to 196608 [ 2077.773821] loop7: detected capacity change from 0 to 512 [ 2077.780609] loop6: detected capacity change from 0 to 264192 [ 2077.783013] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2077.784093] EXT4-fs (loop3): group descriptors corrupted! [ 2077.785863] EXT4-fs (loop7): inodes count not valid: 20 vs 32 [ 2077.788004] No source specified [ 2077.794850] No source specified [ 2077.801179] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2077.802763] EXT4-fs (loop6): group descriptors corrupted! 10:59:18 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x43, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:59:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:59:18 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="180000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2077.927883] No source specified [ 2077.930595] loop3: detected capacity change from 0 to 229376 [ 2077.933380] No source specified 10:59:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2077.945655] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2077.946716] EXT4-fs (loop3): group descriptors corrupted! [ 2077.962218] loop7: detected capacity change from 0 to 512 [ 2077.966061] loop3: detected capacity change from 0 to 229376 [ 2077.977427] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2077.978473] EXT4-fs (loop7): inodes count not valid: 24 vs 32 [ 2077.979318] EXT4-fs (loop3): group descriptors corrupted! 10:59:18 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x45, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2077.993275] loop7: detected capacity change from 0 to 512 [ 2078.010532] EXT4-fs (loop7): inodes count not valid: 24 vs 32 10:59:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:59:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2078.044925] loop6: detected capacity change from 0 to 264192 [ 2078.059908] No source specified [ 2078.064013] No source specified [ 2078.081249] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2078.081377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.082969] EXT4-fs (loop6): group descriptors corrupted! 10:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:59:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x0, r1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) [ 2078.124010] loop6: detected capacity change from 0 to 264192 [ 2078.137509] loop3: detected capacity change from 0 to 262144 [ 2078.150068] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2078.151477] EXT4-fs (loop6): group descriptors corrupted! [ 2078.153022] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2078.153962] EXT4-fs (loop3): group descriptors corrupted! [ 2078.175677] loop3: detected capacity change from 0 to 262144 [ 2078.191320] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2078.192460] EXT4-fs (loop3): group descriptors corrupted! 10:59:27 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="190000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:59:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x0, r1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) 10:59:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:59:27 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:59:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x13c, 0x0, 0x2, 0x4, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x28054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:59:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffe000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2087.430038] loop7: detected capacity change from 0 to 512 [ 2087.444972] EXT4-fs (loop7): inodes count not valid: 25 vs 32 [ 2087.452811] loop7: detected capacity change from 0 to 512 [ 2087.461256] No source specified [ 2087.462551] EXT4-fs (loop7): inodes count not valid: 25 vs 32 [ 2087.467485] No source specified [ 2087.475746] loop6: detected capacity change from 0 to 264192 [ 2087.480432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2087.487817] loop3: detected capacity change from 0 to 264192 [ 2087.496402] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2087.497040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2087.497297] EXT4-fs (loop6): group descriptors corrupted! [ 2087.511411] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2087.512863] EXT4-fs (loop3): group descriptors corrupted! 10:59:27 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1a0000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2087.517913] loop6: detected capacity change from 0 to 264192 10:59:27 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2087.529152] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2087.529930] EXT4-fs (loop6): group descriptors corrupted! [ 2087.531353] loop3: detected capacity change from 0 to 264192 [ 2087.556843] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2087.558326] EXT4-fs (loop3): group descriptors corrupted! [ 2087.579635] loop7: detected capacity change from 0 to 512 10:59:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2087.588207] EXT4-fs (loop7): inodes count not valid: 26 vs 32 [ 2087.601391] No source specified [ 2087.606330] No source specified 10:59:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2087.674451] loop4: detected capacity change from 0 to 512 [ 2087.678262] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2087.678982] EXT4-fs (loop4): group descriptors corrupted! 10:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88001000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x20044850) 10:59:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:59:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="240000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 10:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 10:59:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) [ 2097.009884] loop7: detected capacity change from 0 to 512 [ 2097.012311] No source specified [ 2097.015655] loop6: detected capacity change from 0 to 264192 [ 2097.016740] No source specified [ 2097.019485] loop3: detected capacity change from 0 to 264192 [ 2097.028409] EXT4-fs (loop7): inodes count not valid: 36 vs 32 [ 2097.035746] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.036768] EXT4-fs (loop3): group descriptors corrupted! [ 2097.041899] loop7: detected capacity change from 0 to 512 [ 2097.052873] EXT4-fs (loop7): inodes count not valid: 36 vs 32 [ 2097.054481] loop3: detected capacity change from 0 to 264192 [ 2097.068378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.074753] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.075678] EXT4-fs (loop3): group descriptors corrupted! [ 2097.076447] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.078046] EXT4-fs (loop6): group descriptors corrupted! [ 2097.081229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:59:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2097.096765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:59:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="250000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.121782] loop6: detected capacity change from 0 to 264192 10:59:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.151522] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.153305] EXT4-fs (loop6): group descriptors corrupted! [ 2097.170274] No source specified [ 2097.172758] No source specified [ 2097.178207] loop7: detected capacity change from 0 to 512 [ 2097.188413] EXT4-fs (loop7): inodes count not valid: 37 vs 32 [ 2097.192549] loop3: detected capacity change from 0 to 264192 [ 2097.202992] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.204027] EXT4-fs (loop3): group descriptors corrupted! 10:59:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f0000000280)=""/96, 0x60}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32], 0x38}, 0x100) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getpeername(r5, &(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000980)=0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd29, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r7, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]]}, 0x94}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, r1, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x4f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x252}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cf}], @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x0, 0x2, 0x0, {0x6, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0x8}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 10:59:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2097.225800] loop3: detected capacity change from 0 to 264192 [ 2097.231639] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.232505] EXT4-fs (loop3): group descriptors corrupted! 10:59:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="430000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.271947] No source specified [ 2097.278914] No source specified 10:59:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.296635] loop7: detected capacity change from 0 to 512 10:59:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.340349] loop6: detected capacity change from 0 to 264192 [ 2097.343775] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.344502] EXT4-fs (loop6): group descriptors corrupted! [ 2097.347511] loop6: detected capacity change from 0 to 264192 [ 2097.350723] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.351522] EXT4-fs (loop6): group descriptors corrupted! [ 2097.364661] EXT4-fs (loop7): inodes count not valid: 67 vs 32 [ 2097.373701] loop7: detected capacity change from 0 to 512 10:59:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2097.381004] EXT4-fs (loop7): inodes count not valid: 67 vs 32 [ 2097.392496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:59:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.431204] loop3: detected capacity change from 0 to 264192 [ 2097.457820] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.458701] EXT4-fs (loop3): group descriptors corrupted! [ 2097.482772] loop3: detected capacity change from 0 to 264192 [ 2097.483538] loop6: detected capacity change from 0 to 264192 [ 2097.488436] No source specified [ 2097.492451] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.493288] No source specified [ 2097.493863] EXT4-fs (loop6): group descriptors corrupted! [ 2097.494392] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.495722] EXT4-fs (loop3): group descriptors corrupted! 10:59:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4e0000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 10:59:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 10:59:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2097.510628] loop6: detected capacity change from 0 to 264192 [ 2097.517876] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.519295] EXT4-fs (loop6): group descriptors corrupted! 10:59:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb00, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2097.571055] loop7: detected capacity change from 0 to 512 [ 2097.597325] EXT4-fs (loop7): inodes count not valid: 78 vs 32 10:59:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 10:59:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.615242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.617780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.619466] No source specified [ 2097.621848] No source specified [ 2097.623784] loop7: detected capacity change from 0 to 512 [ 2097.623907] loop3: detected capacity change from 0 to 264192 [ 2097.636913] EXT4-fs (loop7): inodes count not valid: 78 vs 32 [ 2097.637027] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.638572] EXT4-fs (loop3): group descriptors corrupted! [ 2097.640434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.648489] loop3: detected capacity change from 0 to 264192 10:59:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2097.665943] loop6: detected capacity change from 0 to 264192 [ 2097.666847] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.666868] EXT4-fs (loop3): group descriptors corrupted! [ 2097.687989] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.689607] EXT4-fs (loop6): group descriptors corrupted! [ 2097.706295] loop6: detected capacity change from 0 to 264192 [ 2097.715206] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.716786] EXT4-fs (loop6): group descriptors corrupted! 10:59:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2097.745009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.769672] No source specified [ 2097.773479] loop3: detected capacity change from 0 to 264192 [ 2097.788162] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.788856] EXT4-fs (loop3): group descriptors corrupted! [ 2097.792037] No source specified [ 2097.818309] loop3: detected capacity change from 0 to 264192 [ 2097.825693] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.826403] EXT4-fs (loop3): group descriptors corrupted! [ 2100.178013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2100.180880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2100.184369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2100.189233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2100.191806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2102.213218] Bluetooth: hci5: command tx timeout [ 2104.261195] Bluetooth: hci5: command tx timeout [ 2106.309165] Bluetooth: hci5: command tx timeout [ 2108.357189] Bluetooth: hci5: command tx timeout [ 2119.178947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.182480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.275624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.277170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.423652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 11:00:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 11:00:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:00:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="fe0000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe88, 0x3d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2131.123624] loop7: detected capacity change from 0 to 512 [ 2131.127796] No source specified [ 2131.138526] No source specified [ 2131.139990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.142668] EXT4-fs (loop7): inodes count not valid: 254 vs 32 [ 2131.144420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.155728] loop6: detected capacity change from 0 to 264192 [ 2131.167694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.168520] loop7: detected capacity change from 0 to 512 [ 2131.176905] EXT4-fs (loop7): inodes count not valid: 254 vs 32 [ 2131.177052] loop3: detected capacity change from 0 to 264192 [ 2131.185686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.193174] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.194812] EXT4-fs (loop6): group descriptors corrupted! [ 2131.204651] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.206380] EXT4-fs (loop3): group descriptors corrupted! 11:00:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="feff00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2131.232069] loop3: detected capacity change from 0 to 264192 [ 2131.232597] loop6: detected capacity change from 0 to 264192 [ 2131.244146] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.245410] EXT4-fs (loop3): group descriptors corrupted! [ 2131.247746] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.249437] EXT4-fs (loop6): group descriptors corrupted! [ 2131.275160] loop7: detected capacity change from 0 to 512 [ 2131.281688] EXT4-fs (loop7): inodes count not valid: 65534 vs 32 11:00:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="feffffff4000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2131.324595] No source specified [ 2131.335576] No source specified 11:00:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2131.380588] loop7: detected capacity change from 0 to 512 11:00:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x20f4, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2131.399677] EXT4-fs (loop7): inodes count not valid: 4294967294 vs 32 [ 2131.401006] loop3: detected capacity change from 0 to 264192 [ 2131.413336] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.414321] EXT4-fs (loop3): group descriptors corrupted! [ 2131.415024] loop7: detected capacity change from 0 to 512 [ 2131.418504] loop6: detected capacity change from 0 to 264192 [ 2131.423680] EXT4-fs (loop7): inodes count not valid: 4294967294 vs 32 [ 2131.425745] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.426836] EXT4-fs (loop6): group descriptors corrupted! [ 2131.436936] loop3: detected capacity change from 0 to 264192 [ 2131.439678] loop6: detected capacity change from 0 to 264192 [ 2131.447585] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.448682] EXT4-fs (loop6): group descriptors corrupted! [ 2131.451420] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.452394] EXT4-fs (loop3): group descriptors corrupted! [ 2131.455905] No source specified [ 2131.459783] No source specified [ 2131.477216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000100000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2131.567871] loop7: detected capacity change from 0 to 512 [ 2131.584306] EXT4-fs (loop7): bad geometry: first data block 0 is beyond end of filesystem (0) [ 2131.591929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 11:00:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2400, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff97, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf25080000000c0002800800020025000000"], 0x20}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x480) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x440, 0x3f3, 0xa2da7b41557c5af, 0x70bd2b, 0x25dfdbfd, {0x4, 0x2, 0x19, [0x91, 0x5, 0x0, 0x1, 0x0, 0x6, 0x81, 0xc5e4, 0xffff4d24, 0x7, 0x9, 0xffff0000, 0x9, 0x101, 0x16a3, 0x2, 0x9, 0x8, 0x100, 0x10001, 0x4, 0x8000, 0x3f, 0x1, 0x800000, 0xc55f, 0x7, 0x8, 0x3, 0x10000, 0x1ff, 0x919, 0x4, 0x10000, 0x5, 0x2, 0x100, 0x240000, 0xa, 0x80, 0x9, 0x9, 0x0, 0x9, 0x7, 0x7617, 0xffffffff, 0x401, 0x7d3, 0xdff, 0x0, 0xfffff000, 0x8, 0x9, 0x9, 0x1f, 0x8, 0x3, 0x1f, 0xcf3, 0x8000, 0x101, 0x401], [0x4, 0x9, 0xfff, 0x233517c5, 0x9, 0x1, 0x6c, 0x5, 0xfffffff8, 0x0, 0xffffff80, 0x4, 0x4000004, 0x7f, 0xfffffff8, 0x2800000, 0x0, 0x1f, 0x8, 0x7ff, 0x5, 0x7fffffff, 0x400, 0x5, 0x8000, 0xffff, 0x7, 0x400, 0x8, 0x5, 0x200, 0x7ff, 0x4, 0x6, 0x2ab3, 0x2, 0x5, 0x0, 0x1, 0x4fedaacf, 0x9, 0x3, 0x0, 0xf4d6, 0x2d4, 0x4, 0xc5, 0x371, 0x81, 0x401, 0x4, 0x2, 0x1, 0xfff, 0x0, 0x10, 0x4, 0xfffffffb, 0x401, 0x3ff, 0x3, 0x3f, 0x7fffffff, 0x200], [0xaf3, 0x1ff, 0x401, 0x1, 0x3, 0x9, 0x5, 0x1e0, 0x1f, 0xffff, 0x6, 0x840, 0x9, 0xc770, 0xff, 0x3, 0x1, 0xfffffff8, 0xc2, 0x9, 0x9, 0x3ff, 0x6, 0x3, 0x5, 0xffffffff, 0x0, 0x8e, 0x3ff, 0x2, 0x3f, 0x4, 0x72c, 0x6, 0x6, 0xdb, 0x7, 0x2, 0x0, 0x0, 0xfffffff9, 0x200, 0x3, 0xb2, 0x8, 0x8001, 0x472, 0x7ff, 0x80000001, 0x1, 0x4, 0xb61, 0xfff, 0xa9, 0x401, 0x0, 0xf4d, 0xcc44, 0x8000, 0x10001, 0xfffffffe, 0x3, 0x4, 0xffffffff], [0x0, 0x4, 0x80000001, 0xfffffc00, 0xc32, 0x200, 0x400, 0x96d, 0x80000000, 0x0, 0x3ff, 0x5, 0x8001, 0x7fffffff, 0x3, 0x8, 0x5, 0x8, 0xffffffff, 0x8, 0x8, 0x6, 0x3, 0x5, 0x7fff, 0x1, 0x3, 0x2000000, 0x1, 0x5, 0x80000001, 0x0, 0x4, 0x3ff, 0x7d9, 0x0, 0x7, 0x9, 0x7, 0x101, 0x800, 0x4, 0x1, 0x8, 0x7, 0xffffffff, 0x20, 0x2, 0x46, 0x3, 0xffff, 0x80000000, 0x1, 0x5, 0x9, 0x6, 0x6c5, 0x5, 0xffffffff, 0x3, 0xfffffc01, 0x7f, 0x1, 0xdd], 0x1f, ['\x00', 'nl80211\x00', 'wlan1\x00', '\'\x00', '\x00', '@$[\x00', '\xe3)![!-}<\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:00:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:00:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) [ 2140.142569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2140.146596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2140.153483] No source specified [ 2140.156028] No source specified 11:00:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4300, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2140.197821] No source specified [ 2140.203631] No source specified [ 2140.204361] loop7: detected capacity change from 0 to 512 [ 2140.209698] loop3: detected capacity change from 0 to 264192 [ 2140.211324] loop6: detected capacity change from 0 to 264192 11:00:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) [ 2140.227735] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 2140.229253] EXT4-fs (loop7): group descriptors corrupted! [ 2140.232811] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2140.234468] EXT4-fs (loop3): group descriptors corrupted! [ 2140.236728] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2140.238371] EXT4-fs (loop6): group descriptors corrupted! 11:00:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4500, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2140.257747] loop7: detected capacity change from 0 to 512 [ 2140.260945] loop6: detected capacity change from 0 to 264192 [ 2140.262230] loop3: detected capacity change from 0 to 264192 [ 2140.272179] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 2140.276200] EXT4-fs (loop7): group descriptors corrupted! [ 2140.282621] No source specified [ 2140.283756] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2140.285443] EXT4-fs (loop3): group descriptors corrupted! [ 2140.287269] No source specified [ 2140.288476] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2140.290137] EXT4-fs (loop6): group descriptors corrupted! 11:00:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f2254b5bfe17c591c270400", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000200", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 11:00:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:00:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 11:00:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="022c0e781331"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x2000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r8, r9) connect$unix(r10, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:00:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 11:00:28 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:28 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000700000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:28 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2148.545645] loop3: detected capacity change from 0 to 264192 [ 2148.546696] loop6: detected capacity change from 0 to 264192 [ 2148.548720] loop7: detected capacity change from 0 to 512 [ 2148.559234] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2148.560106] EXT4-fs (loop3): group descriptors corrupted! [ 2148.562155] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2148.563003] EXT4-fs (loop6): group descriptors corrupted! [ 2148.565352] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2148.566253] EXT4-fs (loop7): group descriptors corrupted! [ 2148.572681] loop6: detected capacity change from 0 to 264192 [ 2148.575532] loop3: detected capacity change from 0 to 264192 [ 2148.581755] loop7: detected capacity change from 0 to 512 [ 2148.582647] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2148.583037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2148.583582] EXT4-fs (loop6): group descriptors corrupted! [ 2148.588042] No source specified [ 2148.589680] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2148.590533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2148.591389] EXT4-fs (loop3): group descriptors corrupted! [ 2148.593060] No source specified [ 2148.593984] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2148.594841] EXT4-fs (loop7): group descriptors corrupted! [ 2148.607257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:28 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2148.697968] loop6: detected capacity change from 0 to 264192 [ 2148.711314] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2148.713175] EXT4-fs (loop6): group descriptors corrupted! [ 2148.937847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:36 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000900000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf420, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:00:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000005880)={0x64060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7a6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}]}, 0x50}}, 0x0) 11:00:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 11:00:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2156.789206] No source specified [ 2156.790124] No source specified [ 2156.802572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2156.823776] loop3: detected capacity change from 0 to 264192 [ 2156.830389] loop7: detected capacity change from 0 to 512 [ 2156.868597] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2156.870099] EXT4-fs (loop3): group descriptors corrupted! [ 2156.873288] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2156.874829] EXT4-fs (loop7): group descriptors corrupted! [ 2156.891960] No source specified [ 2156.899308] loop6: detected capacity change from 0 to 264192 [ 2156.904324] loop3: detected capacity change from 0 to 264192 [ 2156.909688] loop7: detected capacity change from 0 to 512 [ 2156.911010] No source specified [ 2156.914684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2156.921298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2156.929744] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2156.931513] EXT4-fs (loop3): group descriptors corrupted! [ 2156.935845] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2156.937809] EXT4-fs (loop6): group descriptors corrupted! [ 2156.938770] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2156.940201] EXT4-fs (loop7): group descriptors corrupted! [ 2156.968221] loop6: detected capacity change from 0 to 264192 [ 2156.973916] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2156.974779] EXT4-fs (loop6): group descriptors corrupted! 11:00:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2157.054796] loop3: detected capacity change from 0 to 264192 [ 2157.060242] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.060984] EXT4-fs (loop3): group descriptors corrupted! [ 2157.066562] loop3: detected capacity change from 0 to 264192 [ 2157.076615] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.077475] EXT4-fs (loop3): group descriptors corrupted! 11:00:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2157.113977] No source specified [ 2157.117649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2157.118745] loop7: detected capacity change from 0 to 512 [ 2157.126436] No source specified [ 2157.138415] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2157.140031] EXT4-fs (loop7): group descriptors corrupted! [ 2157.140147] loop6: detected capacity change from 0 to 264192 [ 2157.156823] loop7: detected capacity change from 0 to 512 11:00:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5f220000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2157.162346] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.163118] EXT4-fs (loop6): group descriptors corrupted! [ 2157.164486] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 11:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2157.165937] EXT4-fs (loop7): group descriptors corrupted! [ 2157.182725] loop6: detected capacity change from 0 to 264192 [ 2157.191458] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.192215] EXT4-fs (loop6): group descriptors corrupted! 11:00:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000100000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2157.245391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2157.257657] loop3: detected capacity change from 0 to 264192 [ 2157.268709] No source specified [ 2157.271192] No source specified [ 2157.282149] loop6: detected capacity change from 0 to 264192 [ 2157.287572] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.288329] EXT4-fs (loop6): group descriptors corrupted! [ 2157.301918] loop6: detected capacity change from 0 to 264192 [ 2157.304419] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.306151] EXT4-fs (loop3): group descriptors corrupted! [ 2157.310479] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2157.311236] EXT4-fs (loop6): group descriptors corrupted! [ 2157.556598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002400000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:00:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 11:00:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7596ede8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000100000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair(0x23, 0x0, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000d40)={0x2e0, r6, 0x100, 0x8, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1f, @mcast2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @loopback, 0x2}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x47e}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x11}, 0x4000010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_SSID={0x6, 0x34, @random='q,'}]}, 0x38}, 0x1, 0x0, 0x0, 0x5081}, 0x4000) [ 2167.386017] No source specified [ 2167.389160] No source specified [ 2167.405902] loop7: detected capacity change from 0 to 512 [ 2167.423442] loop6: detected capacity change from 0 to 264192 11:00:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2167.435404] loop3: detected capacity change from 0 to 264192 [ 2167.441888] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2167.442845] EXT4-fs (loop7): group descriptors corrupted! [ 2167.455217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.456770] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.458319] EXT4-fs (loop6): group descriptors corrupted! [ 2167.462053] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.463609] EXT4-fs (loop3): group descriptors corrupted! [ 2167.473765] loop7: detected capacity change from 0 to 512 [ 2167.491347] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2167.492229] EXT4-fs (loop7): group descriptors corrupted! [ 2167.493249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.495871] loop6: detected capacity change from 0 to 264192 [ 2167.498005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.498132] loop3: detected capacity change from 0 to 264192 [ 2167.507280] No source specified [ 2167.510490] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.511935] EXT4-fs (loop6): group descriptors corrupted! [ 2167.515317] No source specified [ 2167.524423] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.525945] EXT4-fs (loop3): group descriptors corrupted! 11:00:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x36) 11:00:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002500000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2167.606856] No source specified 11:00:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2167.614004] No source specified [ 2167.631964] loop3: detected capacity change from 0 to 264192 [ 2167.638962] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.639803] EXT4-fs (loop3): group descriptors corrupted! [ 2167.648427] loop3: detected capacity change from 0 to 264192 [ 2167.652714] loop6: detected capacity change from 0 to 264192 [ 2167.653895] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.654680] EXT4-fs (loop3): group descriptors corrupted! [ 2167.659492] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.660333] EXT4-fs (loop6): group descriptors corrupted! [ 2167.669743] loop6: detected capacity change from 0 to 264192 [ 2167.678254] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.679025] EXT4-fs (loop6): group descriptors corrupted! 11:00:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2167.715699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:00:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002d00000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2167.752634] loop3: detected capacity change from 0 to 264192 [ 2167.758936] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.759709] EXT4-fs (loop3): group descriptors corrupted! [ 2167.766552] loop3: detected capacity change from 0 to 264192 [ 2167.774507] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.775263] EXT4-fs (loop3): group descriptors corrupted! [ 2167.799203] No source specified [ 2167.799487] loop7: detected capacity change from 0 to 512 [ 2167.802066] No source specified [ 2167.814712] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2167.816502] EXT4-fs (loop7): group descriptors corrupted! [ 2167.841584] loop7: detected capacity change from 0 to 512 [ 2167.862738] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2167.864536] EXT4-fs (loop7): group descriptors corrupted! 11:00:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:00:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x36) 11:00:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:48 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2167.910862] loop3: detected capacity change from 0 to 264192 [ 2167.926185] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.926928] EXT4-fs (loop3): group descriptors corrupted! [ 2167.936977] loop3: detected capacity change from 0 to 264192 [ 2167.947681] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2167.948438] EXT4-fs (loop3): group descriptors corrupted! [ 2167.949061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.950147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.978783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.989410] No source specified [ 2167.995354] No source specified 11:00:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x400c000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2168.048482] loop3: detected capacity change from 0 to 264192 [ 2168.052003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.054965] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2168.055789] EXT4-fs (loop3): group descriptors corrupted! [ 2168.060574] loop3: detected capacity change from 0 to 264192 [ 2168.063802] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2168.064555] EXT4-fs (loop3): group descriptors corrupted! [ 2170.501127] Bluetooth: hci1: command 0x0406 tx timeout 11:00:58 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:00:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/194, 0x7fff}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0xfffffffffffffc70}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:00:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200200004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:00:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x36) 11:00:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:00:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2177.820808] loop3: detected capacity change from 0 to 264192 [ 2177.843665] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2177.845172] EXT4-fs (loop3): group descriptors corrupted! [ 2177.871794] loop3: detected capacity change from 0 to 264192 [ 2177.880326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.887864] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2177.889242] EXT4-fs (loop3): group descriptors corrupted! [ 2177.890510] No source specified [ 2177.892768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.895481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.895574] loop7: detected capacity change from 0 to 512 [ 2177.900013] No source specified [ 2177.903931] loop6: detected capacity change from 0 to 264192 [ 2177.920822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2177.925665] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2177.927179] EXT4-fs (loop6): group descriptors corrupted! [ 2177.939139] EXT4-fs (loop7): inodes count not valid: 544 vs 32 [ 2177.954685] loop6: detected capacity change from 0 to 264192 11:00:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2177.963962] loop7: detected capacity change from 0 to 512 [ 2177.973437] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2177.975041] EXT4-fs (loop6): group descriptors corrupted! [ 2177.978308] EXT4-fs (loop7): inodes count not valid: 544 vs 32 11:00:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2178.015076] No source specified [ 2178.017153] No source specified 11:00:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200300004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2178.066810] loop3: detected capacity change from 0 to 264192 11:00:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2178.077375] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2178.078743] EXT4-fs (loop3): group descriptors corrupted! 11:00:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2178.097843] loop3: detected capacity change from 0 to 264192 [ 2178.103025] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2178.104445] EXT4-fs (loop3): group descriptors corrupted! 11:00:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2178.151774] loop7: detected capacity change from 0 to 512 [ 2178.153236] No source specified [ 2178.155963] No source specified [ 2178.172180] EXT4-fs (loop7): inodes count not valid: 800 vs 32 [ 2178.184775] loop7: detected capacity change from 0 to 512 [ 2178.189568] loop6: detected capacity change from 0 to 264192 [ 2178.192018] EXT4-fs (loop7): inodes count not valid: 800 vs 32 [ 2178.200781] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2178.202244] EXT4-fs (loop6): group descriptors corrupted! 11:00:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2178.219003] loop6: detected capacity change from 0 to 264192 [ 2178.227956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.232800] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2178.234328] EXT4-fs (loop6): group descriptors corrupted! [ 2178.249391] loop3: detected capacity change from 0 to 264192 [ 2178.265687] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2178.268223] EXT4-fs (loop3): group descriptors corrupted! 11:00:58 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) [ 2178.290821] loop3: detected capacity change from 0 to 264192 [ 2178.303751] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2178.305314] EXT4-fs (loop3): group descriptors corrupted! [ 2178.353993] No source specified [ 2178.366378] No source specified [ 2178.408833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:01:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x36) 11:01:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:01:09 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200400004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x1314, r2, 0x800, 0xfffffffe, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_FRAME={0xec, 0x33, @mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xf5c}, @device_b, @broadcast, @random="023f93d63313", {0x6, 0x50}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x5, 0x1ffc, 0x0, 0x14f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x8, 0x5e}}, @void, [{0xdd, 0xe, "c1445423c6f7df9c49be3ba8f572"}, {0xdd, 0xa2, "df20e0fcf9a93892d3217bd2fa95c5ac7f5a2c47ab9e6f25513967a2e27e29e1bd333579d01b1bf04e8cff58872e5a77285715146a7ba5cd70421e53e9336644f30f601b8c6262d69eb586c7794065ab40ec5cd532612555a88440a5470da95c0dfc38f950d8c29128deb2e907924f19960a159d4f021ee29590653bce5c63baf1cd6bd3f7a9c4a15442780d68a188fb4cfea06d8ba05b60b5832ad4bd1f83bb20ca"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x11e4, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_b, @random="37693bd5faf3", {0x0, 0x4}}, {0x8, 0x0, 0x2, 0x0, 0x2}}, {@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @from_mac, @device_a, @random="642ec2cfe065", {0x0, 0x1}}, {0xf, 0x1, 0x2, 0x1, 0x55}}}, @ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xcb, "661e84b0b75a06eb60c83f8fd252e080ed9b66ff5db1bac57e061b1af56c9ee975e25a3d712c9f9e3b49bd496153995032e23087198c3de3e9483d44d35ae80330367fcd6a0db452b30a0f30ae1ad56398a7f7f0e72a905c611caac60058d14bab51f2739c4faff1eb59164d3f95ed36104dd127d7eba209d9337e547a2f257a8b8e134ffbd8181931f1ce6c85b8023db30737dd000a6ce7a1ab54abf1ebb92fd551f1d521405124ba1d4c9dcc3e72264a7561131c87cdf9254a2cc7b8c1d840620b886f9486a61c70d778"}, {@device_a, @broadcast, 0x9b, "6bbed1a7ab0b1d027d8c97372cbfba970fd26f23cdbdb5bd83976e87dba5e366161e12be6cfce8ac87bdb7133962e8c667e0424832d84a3ce92f68b62a8f4604bbb5ab83093f886062882054a33dcd864e5ddd845247e4210a72157b3682ce00bf1397e005ea6c04497b351a1f94b5bea6da66712d619ae640f744753d2433aa95591532b771a0036c491424cefe1cf4452d375c2bb687f41652ea"}, {@device_b, @device_a, 0x1, "96"}, {@device_b, @broadcast, 0x1000, "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"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}]}, 0x1314}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="080000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="003411b091f4bbfa53af2e9f5720"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:01:09 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) 11:01:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe8ed9675, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:09 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2189.633942] loop6: detected capacity change from 0 to 264192 [ 2189.648941] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.650417] EXT4-fs (loop6): group descriptors corrupted! [ 2189.673716] loop6: detected capacity change from 0 to 264192 [ 2189.679252] loop3: detected capacity change from 0 to 264192 [ 2189.699011] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.700612] EXT4-fs (loop6): group descriptors corrupted! [ 2189.703543] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.704831] EXT4-fs (loop3): group descriptors corrupted! [ 2189.708844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2189.726422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2189.737724] No source specified [ 2189.746620] loop7: detected capacity change from 0 to 512 [ 2189.746869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2189.751883] loop3: detected capacity change from 0 to 264192 [ 2189.754197] No source specified [ 2189.766509] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.768147] EXT4-fs (loop3): group descriptors corrupted! [ 2189.770668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2189.772298] EXT4-fs (loop7): inodes count not valid: 1056 vs 32 [ 2189.793872] loop7: detected capacity change from 0 to 512 [ 2189.819780] EXT4-fs (loop7): inodes count not valid: 1056 vs 32 11:01:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:01:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200500004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2189.908035] loop6: detected capacity change from 0 to 264192 [ 2189.919575] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.920703] EXT4-fs (loop6): group descriptors corrupted! [ 2189.922256] No source specified [ 2189.925585] No source specified [ 2189.928922] loop3: detected capacity change from 0 to 264192 [ 2189.934977] loop6: detected capacity change from 0 to 264192 [ 2189.947400] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.947487] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.948520] EXT4-fs (loop6): group descriptors corrupted! [ 2189.951242] EXT4-fs (loop3): group descriptors corrupted! [ 2189.964986] loop3: detected capacity change from 0 to 264192 [ 2189.971210] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2189.973030] EXT4-fs (loop3): group descriptors corrupted! 11:01:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2189.989811] loop7: detected capacity change from 0 to 512 [ 2190.000587] EXT4-fs (loop7): inodes count not valid: 1312 vs 32 [ 2190.018778] loop7: detected capacity change from 0 to 512 11:01:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2190.048566] No source specified [ 2190.051425] EXT4-fs (loop7): inodes count not valid: 1312 vs 32 [ 2190.052045] No source specified 11:01:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2190.073020] loop6: detected capacity change from 0 to 264192 [ 2190.085848] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2190.086874] EXT4-fs (loop6): group descriptors corrupted! 11:01:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x24000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2190.106308] loop6: detected capacity change from 0 to 264192 [ 2190.123118] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2190.124060] EXT4-fs (loop6): group descriptors corrupted! [ 2190.170772] No source specified [ 2190.177633] No source specified [ 2190.195581] loop3: detected capacity change from 0 to 264192 [ 2190.221215] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2190.222186] EXT4-fs (loop3): group descriptors corrupted! [ 2190.235376] loop3: detected capacity change from 0 to 264192 [ 2190.238708] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2190.240152] EXT4-fs (loop3): group descriptors corrupted! 11:01:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="43bf448158a5"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40000802) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:01:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200600004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x43000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:01:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) 11:01:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2199.070277] No source specified [ 2199.074508] No source specified [ 2199.076494] loop6: detected capacity change from 0 to 264192 [ 2199.081948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.087521] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.088344] EXT4-fs (loop6): group descriptors corrupted! [ 2199.097450] loop6: detected capacity change from 0 to 264192 11:01:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x45000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2199.108984] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.110037] EXT4-fs (loop6): group descriptors corrupted! [ 2199.111442] loop7: detected capacity change from 0 to 512 [ 2199.123531] EXT4-fs (loop7): inodes count not valid: 1568 vs 32 [ 2199.130777] loop3: detected capacity change from 0 to 264192 [ 2199.132508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.135175] loop7: detected capacity change from 0 to 512 [ 2199.136616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.144380] EXT4-fs (loop7): inodes count not valid: 1568 vs 32 [ 2199.151723] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.153418] EXT4-fs (loop3): group descriptors corrupted! [ 2199.159448] No source specified 11:01:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2199.163524] No source specified 11:01:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="10002abd7000fddbdf257274d588"], 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2199.189175] loop3: detected capacity change from 0 to 264192 [ 2199.205350] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.206968] EXT4-fs (loop3): group descriptors corrupted! 11:01:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2199.208829] loop6: detected capacity change from 0 to 264192 [ 2199.216133] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.216853] EXT4-fs (loop6): group descriptors corrupted! 11:01:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200700004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2199.229341] No source specified [ 2199.232059] No source specified 11:01:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:01:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2199.286276] loop7: detected capacity change from 0 to 512 11:01:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2199.297061] EXT4-fs (loop7): inodes count not valid: 1824 vs 32 [ 2199.304870] loop7: detected capacity change from 0 to 512 [ 2199.309420] EXT4-fs (loop7): inodes count not valid: 1824 vs 32 [ 2199.339837] No source specified [ 2199.348696] No source specified [ 2199.372648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.385011] loop3: detected capacity change from 0 to 264192 [ 2199.389211] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.389962] EXT4-fs (loop3): group descriptors corrupted! [ 2199.397455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.398884] loop3: detected capacity change from 0 to 264192 [ 2199.405638] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2199.406391] EXT4-fs (loop3): group descriptors corrupted! 11:01:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) r3 = accept(r0, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) 11:01:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="10002abd7000fddbdf257274d588"], 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:01:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200800004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:01:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:30 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf4200000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:01:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) [ 2209.947713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.966935] loop7: detected capacity change from 0 to 512 [ 2209.967989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.969552] loop6: detected capacity change from 0 to 264192 [ 2209.973850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.976303] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2209.976752] loop3: detected capacity change from 0 to 264192 [ 2209.977027] EXT4-fs (loop6): group descriptors corrupted! [ 2209.978243] No source specified [ 2209.983010] loop6: detected capacity change from 0 to 264192 [ 2209.985018] No source specified [ 2209.986004] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2209.986784] EXT4-fs (loop6): group descriptors corrupted! [ 2209.992122] EXT4-fs (loop7): inodes count not valid: 2080 vs 32 [ 2209.999120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.001686] loop7: detected capacity change from 0 to 512 [ 2210.003339] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.004965] EXT4-fs (loop3): group descriptors corrupted! [ 2210.006697] EXT4-fs (loop7): inodes count not valid: 2080 vs 32 11:01:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2210.033168] loop3: detected capacity change from 0 to 264192 11:01:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200900004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2210.043199] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.044778] EXT4-fs (loop3): group descriptors corrupted! [ 2210.063244] loop7: detected capacity change from 0 to 512 [ 2210.064753] loop6: detected capacity change from 0 to 264192 [ 2210.068991] EXT4-fs (loop7): inodes count not valid: 2336 vs 32 [ 2210.072999] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.073742] EXT4-fs (loop6): group descriptors corrupted! 11:01:30 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2210.076753] loop7: detected capacity change from 0 to 512 [ 2210.081152] EXT4-fs (loop7): inodes count not valid: 2336 vs 32 [ 2210.081975] loop6: detected capacity change from 0 to 264192 [ 2210.087684] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.088494] EXT4-fs (loop6): group descriptors corrupted! 11:01:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200a00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2210.146038] loop7: detected capacity change from 0 to 512 [ 2210.151880] loop6: detected capacity change from 0 to 264192 [ 2210.152446] EXT4-fs (loop7): inodes count not valid: 2592 vs 32 [ 2210.158444] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.159183] EXT4-fs (loop6): group descriptors corrupted! [ 2210.159927] loop7: detected capacity change from 0 to 512 [ 2210.163338] EXT4-fs (loop7): inodes count not valid: 2592 vs 32 [ 2210.168974] No source specified [ 2210.172197] No source specified 11:01:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200b00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2210.227822] loop3: detected capacity change from 0 to 264192 [ 2210.240161] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.241792] EXT4-fs (loop3): group descriptors corrupted! [ 2210.255438] loop3: detected capacity change from 0 to 264192 [ 2210.261516] loop7: detected capacity change from 0 to 512 [ 2210.261997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.264529] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2210.266155] EXT4-fs (loop3): group descriptors corrupted! [ 2210.278193] EXT4-fs (loop7): inodes count not valid: 2848 vs 32 [ 2210.289939] loop7: detected capacity change from 0 to 512 [ 2210.300331] EXT4-fs (loop7): inodes count not valid: 2848 vs 32 11:01:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200c00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="10002abd7000fddbdf257274d588"], 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:01:41 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:01:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:01:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:01:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:01:41 executing program 1: init_module(&(0x7f00000002c0)='wlan1\x00', 0x6, &(0x7f0000000500)='\x00\x00\t@\x00\x00\x00\x00\x00\x00\x00\x89\x93\xed\x16\x1cd:\xe0\xc03\xe8o\xb8\x91\x8b\xa10\xd5\xe6\xb6\x11\x9e1h:\x88\xd2+\xf5\x7f\x81\xda\xe0d\xdc\xb1\t\xcb\xf0\xa8\xac\xbf\x14\xec\xf0f\x0f\xfe>BYD\xca\x81\x8cbE$o\x7f/{l\x0ffEN\xb0d\x1a\x80\x90\x83\aC\x92s\xcbJ\x0e|\xaei\xf7Gj\xe5\x95\xce\xd2\n\x1d0\xccG\xe1F\xc1Y\xc8\x86\xfc\xb7\xc1\xdb\xd0\xed\x16\xe9\x89u\x18Z\x9088\xaa3\xaa6\x819\x13M\x93UD\x19x&\xefx\xaa\x00|\xcady\xbc\x0e\x10\'\xdb\x04/\xaa\xae%\x9f\xfe\x00\xb8\x1f\xe5N\x00=\xeb\xa1\x18\x00\x00\x00\x00\x00\x00\x00\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2b}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x811) r8 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getpid() r10 = getpid() kcmp(r10, r9, 0x0, 0xffffffffffffffff, r8) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002bbd7000fddbf8ff6bac833e0238090008000300", @ANYRES32=r1, @ANYBLOB="0a001a0008021100000000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6b0bf72ddd", @ANYRES16=r0, @ANYBLOB="050000040000000000002109000008000300", @ANYRES32=r1, @ANYBLOB="4bf8205daca7ba60a404807dadbb57ff95f5a7a403c34cae90a1fa6694b6e4f0d93a8e02c136b1512d02047dce59dde13bb30a46985449ba2d9a6d86e228e2d38cf2019bd050b8ef3c7b5f899e61329d20bea16b7cca3d5ec58f78be12dcd6da70b003c4bc0e60ab12f827"], 0x1c}}, 0x0) [ 2221.017357] loop7: detected capacity change from 0 to 512 [ 2221.018436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2221.025270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2221.035650] loop3: detected capacity change from 0 to 264192 [ 2221.038003] loop6: detected capacity change from 0 to 264192 [ 2221.041370] No source specified [ 2221.047475] No source specified [ 2221.050283] EXT4-fs (loop7): inodes count not valid: 3104 vs 32 [ 2221.053647] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2221.055205] EXT4-fs (loop6): group descriptors corrupted! [ 2221.057669] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2221.059018] EXT4-fs (loop3): group descriptors corrupted! [ 2221.075231] loop7: detected capacity change from 0 to 512 [ 2221.082838] loop3: detected capacity change from 0 to 264192 [ 2221.084964] loop6: detected capacity change from 0 to 264192 [ 2221.093635] EXT4-fs (loop7): inodes count not valid: 3104 vs 32 [ 2221.098715] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2221.100296] EXT4-fs (loop3): group descriptors corrupted! [ 2221.101172] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2221.102487] EXT4-fs (loop6): group descriptors corrupted! [ 2221.108565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:01:41 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:01:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x8b8}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5eb}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4000040) [ 2221.193746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2221.207899] No source specified [ 2221.209912] No source specified [ 2223.701108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2223.703967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2223.705908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2223.713020] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2223.717690] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2223.749322] Bluetooth: hci5: command 0x0406 tx timeout [ 2225.797211] Bluetooth: hci1: command tx timeout [ 2227.845153] Bluetooth: hci1: command tx timeout [ 2229.894223] Bluetooth: hci1: command tx timeout [ 2231.941168] Bluetooth: hci1: command tx timeout [ 2242.072637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.073956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.141130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.142268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.255409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2242.582775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:02:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x110, r0, 0xeecfd000) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="50000000080100c5380108"], 0x36) 11:02:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="29d28d2b93cc636a15c6f8682d"], 0x36) 11:02:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:02:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:02:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200d00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:02:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2252.262436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.266748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.271783] No source specified [ 2252.272917] No source specified 11:02:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2252.316701] loop6: detected capacity change from 0 to 264192 [ 2252.320737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.323858] loop7: detected capacity change from 0 to 512 [ 2252.326312] loop3: detected capacity change from 0 to 264192 [ 2252.332580] No source specified [ 2252.334620] No source specified [ 2252.341566] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.343273] EXT4-fs (loop6): group descriptors corrupted! [ 2252.345472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.345772] EXT4-fs (loop7): inodes count not valid: 3360 vs 32 [ 2252.348340] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.350016] EXT4-fs (loop3): group descriptors corrupted! [ 2252.370405] loop7: detected capacity change from 0 to 512 [ 2252.371733] loop3: detected capacity change from 0 to 264192 [ 2252.376595] loop6: detected capacity change from 0 to 264192 11:02:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2252.384147] EXT4-fs (loop7): inodes count not valid: 3360 vs 32 [ 2252.385376] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.386864] EXT4-fs (loop3): group descriptors corrupted! [ 2252.396863] No source specified [ 2252.399316] No source specified [ 2252.408507] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.410235] EXT4-fs (loop6): group descriptors corrupted! 11:02:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:02:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200e00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2252.486231] No source specified [ 2252.490583] No source specified 11:02:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2252.524849] loop3: detected capacity change from 0 to 264192 [ 2252.527264] loop7: detected capacity change from 0 to 512 [ 2252.534855] EXT4-fs (loop7): inodes count not valid: 3616 vs 32 [ 2252.545379] loop7: detected capacity change from 0 to 512 [ 2252.546306] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.546325] EXT4-fs (loop3): group descriptors corrupted! [ 2252.554305] loop3: detected capacity change from 0 to 264192 [ 2252.562272] EXT4-fs (loop7): inodes count not valid: 3616 vs 32 11:02:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2252.582680] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.583773] EXT4-fs (loop3): group descriptors corrupted! 11:02:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2252.621628] loop6: detected capacity change from 0 to 264192 [ 2252.631659] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.632639] EXT4-fs (loop6): group descriptors corrupted! [ 2252.643710] loop6: detected capacity change from 0 to 264192 [ 2252.648145] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.648968] EXT4-fs (loop6): group descriptors corrupted! [ 2252.653908] No source specified [ 2252.665014] No source specified 11:02:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="29d28d2b93cc636a15c6f8682d"], 0x36) 11:02:12 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:02:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2252.735677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.752190] loop3: detected capacity change from 0 to 264192 [ 2252.754700] loop7: detected capacity change from 0 to 512 [ 2252.756251] loop6: detected capacity change from 0 to 264192 [ 2252.761949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2252.772524] EXT4-fs (loop7): inodes count not valid: 4128 vs 32 [ 2252.774289] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.775789] EXT4-fs (loop3): group descriptors corrupted! [ 2252.789011] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.790425] EXT4-fs (loop6): group descriptors corrupted! [ 2252.794029] loop3: detected capacity change from 0 to 264192 [ 2252.801829] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.803432] EXT4-fs (loop3): group descriptors corrupted! [ 2252.820915] loop6: detected capacity change from 0 to 264192 [ 2252.824595] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2252.825550] EXT4-fs (loop6): group descriptors corrupted! 11:02:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="29d28d2b93cc636a15c6f8682d"], 0x36) 11:02:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:02:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:02:23 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="202400004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:23 executing program 1: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x7c, 0x5b, "f32900ddf049bd3777ca024bc5e44f321af755c8f5270b137cf237b9ab9f30d0a8fd87ebee3dbe9003744455ec1d3f1022938a812d7bff7e27e8925a5aacfa25c7e5ed2947c673ff3e4860ac5d267fd9728a8813ba64abe4d070b384c3b925c83a5910eb9d1355365f11c78487b130cbdba490852603e45c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4000881) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0x5, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02042abd7000fedbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="170006ff01000000000100002c002c800800000008000000080000000700000008000000090000000800000000100000080000000a0000000400870000002c800000000007000000000000000300000000000000000000000000f60080000000abc8e194613b7501d08808ec505f46cf93a894cb25b21d809be1ba87d45b98f33758f05f4ee269b2cb82d5d3ea1cfb65194742a771d5a4a891c3418dc5818d4f312abd7a62c1a6"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4040) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:02:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:02:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2263.179278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.185867] loop7: detected capacity change from 0 to 512 [ 2263.190394] EXT4-fs (loop7): inodes count not valid: 9248 vs 32 [ 2263.195826] loop7: detected capacity change from 0 to 512 [ 2263.199049] EXT4-fs (loop7): inodes count not valid: 9248 vs 32 [ 2263.207012] loop3: detected capacity change from 0 to 264192 [ 2263.207212] No source specified [ 2263.212282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.215556] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.216408] EXT4-fs (loop3): group descriptors corrupted! [ 2263.216441] No source specified [ 2263.218456] loop6: detected capacity change from 0 to 264192 [ 2263.229572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.234577] loop3: detected capacity change from 0 to 264192 [ 2263.239019] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.239373] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.240782] EXT4-fs (loop6): group descriptors corrupted! 11:02:23 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="202700004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2263.241151] EXT4-fs (loop3): group descriptors corrupted! [ 2263.246761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.284751] loop6: detected capacity change from 0 to 264192 [ 2263.292878] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.293728] EXT4-fs (loop6): group descriptors corrupted! 11:02:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:02:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2263.322435] loop7: detected capacity change from 0 to 512 [ 2263.334058] EXT4-fs (loop7): inodes count not valid: 10016 vs 32 11:02:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2263.348039] loop3: detected capacity change from 0 to 264192 [ 2263.352551] loop7: detected capacity change from 0 to 512 [ 2263.365233] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.365968] EXT4-fs (loop3): group descriptors corrupted! [ 2263.369274] EXT4-fs (loop7): inodes count not valid: 10016 vs 32 [ 2263.372471] loop3: detected capacity change from 0 to 264192 [ 2263.377308] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.378034] EXT4-fs (loop3): group descriptors corrupted! [ 2263.400887] No source specified [ 2263.402658] No source specified 11:02:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:23 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="204300004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2263.437993] loop6: detected capacity change from 0 to 264192 11:02:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2263.453011] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.454515] EXT4-fs (loop6): group descriptors corrupted! [ 2263.459052] loop3: detected capacity change from 0 to 264192 [ 2263.481400] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.482229] EXT4-fs (loop3): group descriptors corrupted! [ 2263.482863] loop6: detected capacity change from 0 to 264192 [ 2263.490433] loop3: detected capacity change from 0 to 264192 [ 2263.493758] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.495343] EXT4-fs (loop6): group descriptors corrupted! [ 2263.503306] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2263.504030] EXT4-fs (loop3): group descriptors corrupted! [ 2263.508019] loop7: detected capacity change from 0 to 512 11:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81050}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x2f, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x73}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb9}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44001) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="2121000008fe06c5380108ac8d235d4494554349dfa10a9c8a4f2939e998975d71c2df8fd78b2cf3e7d6e007467f8870bc"], 0x36) [ 2263.529252] EXT4-fs (loop7): inodes count not valid: 17184 vs 32 [ 2263.544760] No source specified [ 2263.548733] loop7: detected capacity change from 0 to 512 [ 2263.551763] No source specified [ 2263.570953] EXT4-fs (loop7): inodes count not valid: 17184 vs 32 [ 2263.606352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.916478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:02:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:02:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r1, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESHEX=r2], 0x1c}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x5c, 0x5, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x176}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES16], 0x36) r4 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x200000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random='w93))%'}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x21361a0566ccff7b) 11:02:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:02:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:32 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:02:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="206000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2272.609690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.613452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.619386] loop3: detected capacity change from 0 to 264192 [ 2272.627018] loop6: detected capacity change from 0 to 264192 [ 2272.631898] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.632676] EXT4-fs (loop6): group descriptors corrupted! [ 2272.636846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.642784] loop6: detected capacity change from 0 to 264192 [ 2272.646277] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.647013] EXT4-fs (loop6): group descriptors corrupted! [ 2272.655362] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.657134] EXT4-fs (loop3): group descriptors corrupted! [ 2272.666512] No source specified [ 2272.671960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.671996] No source specified [ 2272.673492] loop7: detected capacity change from 0 to 512 [ 2272.693490] EXT4-fs (loop7): inodes count not valid: 24608 vs 32 11:02:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2272.701543] loop3: detected capacity change from 0 to 264192 [ 2272.704831] loop7: detected capacity change from 0 to 512 [ 2272.713653] EXT4-fs (loop7): inodes count not valid: 24608 vs 32 [ 2272.717168] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.718881] EXT4-fs (loop3): group descriptors corrupted! [ 2272.726014] loop6: detected capacity change from 0 to 264192 [ 2272.732795] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.733663] EXT4-fs (loop6): group descriptors corrupted! 11:02:32 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:02:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20f000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff97, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2272.805982] loop6: detected capacity change from 0 to 264192 [ 2272.822353] loop3: detected capacity change from 0 to 264192 [ 2272.829553] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.830399] EXT4-fs (loop3): group descriptors corrupted! [ 2272.837397] No source specified [ 2272.840599] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.842123] EXT4-fs (loop6): group descriptors corrupted! [ 2272.844037] No source specified 11:02:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2272.865239] loop7: detected capacity change from 0 to 512 [ 2272.866058] loop6: detected capacity change from 0 to 264192 [ 2272.877145] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.878897] EXT4-fs (loop6): group descriptors corrupted! [ 2272.885891] EXT4-fs (loop7): inodes count not valid: 61472 vs 32 [ 2272.894543] loop3: detected capacity change from 0 to 264192 11:02:33 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2272.902693] loop7: detected capacity change from 0 to 512 [ 2272.904151] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.904886] EXT4-fs (loop3): group descriptors corrupted! [ 2272.911532] loop3: detected capacity change from 0 to 264192 [ 2272.912129] EXT4-fs (loop7): inodes count not valid: 61472 vs 32 [ 2272.922561] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2272.923321] EXT4-fs (loop3): group descriptors corrupted! [ 2272.930624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:02:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2272.993852] loop6: detected capacity change from 0 to 264192 [ 2272.998639] No source specified [ 2273.002001] No source specified [ 2273.012343] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2273.013060] EXT4-fs (loop6): group descriptors corrupted! [ 2273.027046] loop6: detected capacity change from 0 to 264192 [ 2273.039260] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2273.039991] EXT4-fs (loop6): group descriptors corrupted! 11:02:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20f500004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:02:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:02:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05f05e71bc126d52c520123453cc0000000000000000002100bddc215d9b17", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b6e1a4ac83e619cd4b4738ce2a0000004c8a678a41d0883c142a00", @ANYRES16=r4, @ANYBLOB="020028bd7000fddbdf252e00000005001801060000000400e200"], 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000050000000000000008"], 0x36) 11:02:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:43 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2283.647279] loop7: detected capacity change from 0 to 512 [ 2283.665678] No source specified [ 2283.668666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2283.669437] EXT4-fs (loop7): inodes count not valid: 62752 vs 32 [ 2283.672038] No source specified [ 2283.674670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2283.687309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2283.697285] loop7: detected capacity change from 0 to 512 [ 2283.703943] loop3: detected capacity change from 0 to 264192 [ 2283.707396] loop6: detected capacity change from 0 to 264192 11:02:43 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2283.710837] EXT4-fs (loop7): inodes count not valid: 62752 vs 32 [ 2283.728555] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2283.730117] EXT4-fs (loop3): group descriptors corrupted! [ 2283.731593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2283.732146] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2283.734168] EXT4-fs (loop6): group descriptors corrupted! [ 2283.764316] No source specified [ 2283.767659] No source specified [ 2283.774287] loop3: detected capacity change from 0 to 264192 11:02:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2283.782354] loop6: detected capacity change from 0 to 264192 11:02:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2283.800543] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2283.802262] EXT4-fs (loop3): group descriptors corrupted! [ 2283.813517] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2283.815045] EXT4-fs (loop6): group descriptors corrupted! [ 2283.829919] No source specified [ 2283.832255] No source specified [ 2283.993441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:02:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:53 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fe00004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:02:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x7c7080, 0xe0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06c54c05082dc3aa5fe598ef00000000ad13ee412ea48a64b1ce3837941a82e3245138b4b12cde54b150f90207224e15c0a2fc7aef830cd1c29bf9214a6d7fa5be248b7fb29459dba7853bdab5a5daa048fddcb365ebdcf7f77ecc27b9cad48d64b6086670b7809ced93d1451134afe0c308362eef0d397f79f069d05fa96b29fa0000"], 0x36) 11:02:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 1) 11:02:53 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) 11:02:53 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb00000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2293.655325] loop6: detected capacity change from 0 to 264192 [ 2293.668303] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2293.670232] EXT4-fs (loop6): group descriptors corrupted! [ 2293.676285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2293.686347] loop6: detected capacity change from 0 to 264192 [ 2293.689724] loop7: detected capacity change from 0 to 512 [ 2293.691527] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2293.692282] EXT4-fs (loop6): group descriptors corrupted! [ 2293.702202] EXT4-fs (loop7): inodes count not valid: 65056 vs 32 [ 2293.707716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2293.708910] No source specified [ 2293.712030] loop7: detected capacity change from 0 to 512 [ 2293.714256] No source specified [ 2293.715686] loop3: detected capacity change from 0 to 264192 [ 2293.719532] FAULT_INJECTION: forcing a failure. [ 2293.719532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2293.720583] CPU: 0 UID: 0 PID: 17101 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2293.720600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2293.720607] Call Trace: [ 2293.720612] [ 2293.720617] dump_stack_lvl+0xfa/0x120 [ 2293.720645] should_fail_ex+0x4d7/0x5e0 [ 2293.720668] _copy_from_user+0x30/0xd0 [ 2293.720691] copy_msghdr_from_user+0x88/0x150 [ 2293.720714] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2293.720736] ? __pfx_perf_trace_lock+0x10/0x10 [ 2293.720755] ? lock_acquire+0x15e/0x2f0 [ 2293.720770] ___sys_sendmsg+0xdc/0x1b0 [ 2293.720791] ? __pfx____sys_sendmsg+0x10/0x10 [ 2293.720810] ? perf_trace_lock+0xb5/0x5d0 [ 2293.720825] ? __pfx_perf_trace_lock+0x10/0x10 [ 2293.720838] ? proc_fail_nth_write+0x97/0x220 [ 2293.720861] ? lock_acquire+0x15e/0x2f0 [ 2293.720873] ? __fget_files+0x34/0x3b0 [ 2293.720891] ? find_held_lock+0x2b/0x80 [ 2293.720909] ? __fget_files+0x203/0x3b0 [ 2293.720926] ? lock_release+0xc8/0x290 [ 2293.720941] ? __fget_files+0x20d/0x3b0 [ 2293.720965] __sys_sendmsg+0x150/0x200 [ 2293.720985] ? __pfx___sys_sendmsg+0x10/0x10 [ 2293.721008] ? fput+0x6a/0x100 [ 2293.721022] ? ksys_write+0x1a3/0x240 [ 2293.721041] ? __pfx_ksys_write+0x10/0x10 [ 2293.721069] do_syscall_64+0xbf/0x360 [ 2293.721084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.721097] RIP: 0033:0x7ff72c9b6b19 [ 2293.721107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2293.721119] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2293.721132] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2293.721140] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2293.721148] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.721156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.721164] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2293.721181] [ 2293.748208] EXT4-fs (loop7): inodes count not valid: 65056 vs 32 [ 2293.752966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2293.755790] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2293.757430] EXT4-fs (loop3): group descriptors corrupted! 11:02:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6618000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:02:54 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2293.790394] loop3: detected capacity change from 0 to 264192 [ 2293.803344] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2293.805030] EXT4-fs (loop3): group descriptors corrupted! 11:02:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="205301004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2293.867141] No source specified [ 2293.872707] No source specified [ 2293.894433] loop7: detected capacity change from 0 to 512 [ 2293.903281] EXT4-fs (loop7): inodes count not valid: 86816 vs 32 [ 2293.915558] loop7: detected capacity change from 0 to 512 [ 2293.927508] EXT4-fs (loop7): inodes count not valid: 86816 vs 32 [ 2293.994468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:03:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 2) 11:03:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:03:02 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) 11:03:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:03:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="205501004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:03:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7001000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2302.653032] loop6: detected capacity change from 0 to 264192 [ 2302.661193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2302.662644] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2302.663405] EXT4-fs (loop6): group descriptors corrupted! [ 2302.670870] loop6: detected capacity change from 0 to 264192 [ 2302.673806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2302.676454] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2302.677226] EXT4-fs (loop6): group descriptors corrupted! [ 2302.689949] FAULT_INJECTION: forcing a failure. [ 2302.689949] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.691884] CPU: 1 UID: 0 PID: 17125 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2302.691917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2302.691931] Call Trace: [ 2302.691939] [ 2302.691949] dump_stack_lvl+0xfa/0x120 [ 2302.691997] should_fail_ex+0x4d7/0x5e0 [ 2302.692040] should_failslab+0xc2/0x120 [ 2302.692072] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 2302.692109] ? __alloc_skb+0x2ab/0x370 [ 2302.692155] __alloc_skb+0x2ab/0x370 [ 2302.692192] ? __pfx___alloc_skb+0x10/0x10 [ 2302.692235] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2302.692284] netlink_alloc_large_skb+0x69/0x150 [ 2302.692328] netlink_sendmsg+0x676/0xd80 [ 2302.692357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2302.692396] ____sys_sendmsg+0xa67/0xc20 [ 2302.692428] ? copy_msghdr_from_user+0xfb/0x150 [ 2302.692468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2302.692510] ? lock_acquire+0x15e/0x2f0 [ 2302.692541] ___sys_sendmsg+0x10f/0x1b0 [ 2302.692583] ? __pfx____sys_sendmsg+0x10/0x10 [ 2302.692621] ? perf_trace_lock+0xb5/0x5d0 [ 2302.692654] ? __pfx_perf_trace_lock+0x10/0x10 [ 2302.692678] ? proc_fail_nth_write+0x97/0x220 [ 2302.692723] ? lock_acquire+0x15e/0x2f0 [ 2302.692747] ? __fget_files+0x34/0x3b0 [ 2302.692783] ? find_held_lock+0x2b/0x80 [ 2302.692817] ? __fget_files+0x203/0x3b0 [ 2302.692853] ? lock_release+0xc8/0x290 [ 2302.692883] ? __fget_files+0x20d/0x3b0 [ 2302.692930] __sys_sendmsg+0x150/0x200 [ 2302.692970] ? __pfx___sys_sendmsg+0x10/0x10 [ 2302.693022] ? __pfx_ksys_write+0x10/0x10 [ 2302.693073] do_syscall_64+0xbf/0x360 [ 2302.693100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.693126] RIP: 0033:0x7ff72c9b6b19 [ 2302.693145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2302.693169] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2302.693193] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2302.693209] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2302.693225] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2302.693240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.693255] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2302.693290] [ 2302.730978] No source specified [ 2302.735265] No source specified 11:03:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2302.737607] loop7: detected capacity change from 0 to 512 [ 2302.743853] loop3: detected capacity change from 0 to 264192 [ 2302.755291] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2302.756779] EXT4-fs (loop3): group descriptors corrupted! [ 2302.759644] EXT4-fs (loop7): inodes count not valid: 87328 vs 32 [ 2302.760687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2302.762172] loop6: detected capacity change from 0 to 264192 [ 2302.771926] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2302.772775] EXT4-fs (loop6): group descriptors corrupted! [ 2302.780593] loop3: detected capacity change from 0 to 264192 [ 2302.795024] loop7: detected capacity change from 0 to 512 [ 2302.800035] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2302.802170] EXT4-fs (loop3): group descriptors corrupted! 11:03:03 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2302.808194] EXT4-fs (loop7): inodes count not valid: 87328 vs 32 11:03:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7596ede800000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 3) [ 2302.853850] No source specified [ 2302.856583] No source specified 11:03:03 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="207201004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2302.916059] loop7: detected capacity change from 0 to 512 [ 2302.922465] EXT4-fs (loop7): inodes count not valid: 94752 vs 32 [ 2302.929006] loop7: detected capacity change from 0 to 512 [ 2302.932665] EXT4-fs (loop7): inodes count not valid: 94752 vs 32 [ 2302.945878] loop3: detected capacity change from 0 to 264192 [ 2302.963412] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2302.964891] EXT4-fs (loop3): group descriptors corrupted! 11:03:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:03:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x80, r7, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "056e3f41dd8c1647dba74c8e8fb49cca8174f335100f65d3"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r9, r10) connect$unix(r11, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_MPATH(r11, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:03:13 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) 11:03:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2400000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:03:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20f801004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 4) 11:03:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2312.805566] loop3: detected capacity change from 0 to 264192 [ 2312.822352] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.823344] EXT4-fs (loop3): group descriptors corrupted! [ 2312.826007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2312.835023] loop3: detected capacity change from 0 to 264192 [ 2312.841666] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.842570] EXT4-fs (loop3): group descriptors corrupted! [ 2312.848141] loop6: detected capacity change from 0 to 264192 [ 2312.854849] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.855772] EXT4-fs (loop6): group descriptors corrupted! [ 2312.865443] loop6: detected capacity change from 0 to 264192 [ 2312.873647] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.874504] EXT4-fs (loop6): group descriptors corrupted! [ 2312.880783] No source specified 11:03:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2312.891845] loop7: detected capacity change from 0 to 512 [ 2312.894415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2312.894834] No source specified [ 2312.908020] EXT4-fs (loop7): inodes count not valid: 129056 vs 32 11:03:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2312.929955] loop3: detected capacity change from 0 to 264192 [ 2312.930833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2312.939480] loop7: detected capacity change from 0 to 512 [ 2312.939513] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.941361] EXT4-fs (loop3): group descriptors corrupted! [ 2312.953334] EXT4-fs (loop7): inodes count not valid: 129056 vs 32 [ 2312.957933] loop6: detected capacity change from 0 to 264192 [ 2312.967307] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.968158] EXT4-fs (loop6): group descriptors corrupted! [ 2312.976787] loop6: detected capacity change from 0 to 264192 [ 2312.983586] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2312.984438] EXT4-fs (loop6): group descriptors corrupted! 11:03:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 5) 11:03:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4300000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:03:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8ed9010000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2313.039141] loop3: detected capacity change from 0 to 264192 [ 2313.047474] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2313.048221] EXT4-fs (loop3): group descriptors corrupted! 11:03:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2313.062236] loop3: detected capacity change from 0 to 264192 [ 2313.069340] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2313.070156] EXT4-fs (loop3): group descriptors corrupted! [ 2313.086923] loop6: detected capacity change from 0 to 264192 [ 2313.092644] No source specified [ 2313.094880] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2313.095627] EXT4-fs (loop6): group descriptors corrupted! [ 2313.099855] No source specified [ 2313.105625] loop6: detected capacity change from 0 to 264192 [ 2313.110763] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 11:03:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2313.111559] EXT4-fs (loop6): group descriptors corrupted! [ 2313.154810] loop7: detected capacity change from 0 to 512 [ 2313.179739] loop3: detected capacity change from 0 to 264192 [ 2313.184355] EXT4-fs (loop7): inodes count not valid: 196640 vs 32 [ 2313.187702] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2313.188546] EXT4-fs (loop3): group descriptors corrupted! [ 2313.196940] loop3: detected capacity change from 0 to 264192 [ 2313.206762] loop7: detected capacity change from 0 to 512 [ 2313.210589] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2313.212100] EXT4-fs (loop3): group descriptors corrupted! [ 2313.220108] EXT4-fs (loop7): inodes count not valid: 196640 vs 32 11:03:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4500000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:03:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:03:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 6) 11:03:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:22 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[], 0x36) 11:03:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80040008}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x10a, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xf7251e1b0a9f18d) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7ff, 0x18043) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x6c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x16}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) 11:03:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201004004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2322.430617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.433862] loop6: detected capacity change from 0 to 264192 [ 2322.435018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.450216] loop3: detected capacity change from 0 to 264192 [ 2322.453910] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.454678] EXT4-fs (loop3): group descriptors corrupted! [ 2322.462408] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.463149] EXT4-fs (loop6): group descriptors corrupted! [ 2322.463761] loop3: detected capacity change from 0 to 264192 [ 2322.467607] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.468355] EXT4-fs (loop3): group descriptors corrupted! [ 2322.471717] loop6: detected capacity change from 0 to 264192 [ 2322.478090] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.478822] EXT4-fs (loop6): group descriptors corrupted! 11:03:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2322.500824] No source specified [ 2322.505766] No source specified [ 2322.507013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.507857] FAULT_INJECTION: forcing a failure. [ 2322.507857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2322.507895] CPU: 0 UID: 0 PID: 17212 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2322.507925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2322.507940] Call Trace: [ 2322.507948] [ 2322.507959] dump_stack_lvl+0xfa/0x120 [ 2322.508006] should_fail_ex+0x4d7/0x5e0 [ 2322.508046] _copy_from_iter+0x1dc/0x15b0 [ 2322.508095] ? lock_acquire+0x15e/0x2f0 [ 2322.508119] ? __virt_addr_valid+0x1c6/0x5d0 [ 2322.508155] ? find_held_lock+0x2b/0x80 [ 2322.508189] ? __pfx__copy_from_iter+0x10/0x10 [ 2322.508224] ? lock_release+0xc8/0x290 [ 2322.508252] ? __virt_addr_valid+0x100/0x5d0 [ 2322.508289] ? __check_object_size+0x57b/0x880 [ 2322.508325] netlink_sendmsg+0x809/0xd80 [ 2322.508355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2322.508391] ____sys_sendmsg+0xa67/0xc20 [ 2322.508421] ? copy_msghdr_from_user+0xfb/0x150 [ 2322.508458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2322.508497] ? lock_acquire+0x15e/0x2f0 [ 2322.508524] ___sys_sendmsg+0x10f/0x1b0 [ 2322.508562] ? __pfx____sys_sendmsg+0x10/0x10 [ 2322.508598] ? perf_trace_lock+0xb5/0x5d0 [ 2322.508627] ? __pfx_perf_trace_lock+0x10/0x10 [ 2322.508650] ? proc_fail_nth_write+0x97/0x220 [ 2322.508692] ? lock_acquire+0x15e/0x2f0 [ 2322.508714] ? __fget_files+0x34/0x3b0 [ 2322.508747] ? find_held_lock+0x2b/0x80 [ 2322.508779] ? __fget_files+0x203/0x3b0 [ 2322.508811] ? lock_release+0xc8/0x290 [ 2322.508839] ? __fget_files+0x20d/0x3b0 [ 2322.508883] __sys_sendmsg+0x150/0x200 [ 2322.508920] ? __pfx___sys_sendmsg+0x10/0x10 [ 2322.508969] ? __pfx_ksys_write+0x10/0x10 [ 2322.509015] do_syscall_64+0xbf/0x360 [ 2322.509041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2322.509065] RIP: 0033:0x7ff72c9b6b19 [ 2322.509082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.509104] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2322.509126] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2322.509142] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2322.509157] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.509170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2322.509184] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2322.509217] [ 2322.513196] loop7: detected capacity change from 0 to 512 [ 2322.537636] loop3: detected capacity change from 0 to 264192 [ 2322.559481] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.560308] EXT4-fs (loop3): group descriptors corrupted! 11:03:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2322.562208] EXT4-fs (loop7): inodes count not valid: 266272 vs 32 [ 2322.571399] loop6: detected capacity change from 0 to 264192 [ 2322.578090] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.578829] EXT4-fs (loop6): group descriptors corrupted! [ 2322.579769] loop3: detected capacity change from 0 to 264192 11:03:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2322.590622] loop7: detected capacity change from 0 to 512 [ 2322.591539] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.592386] EXT4-fs (loop3): group descriptors corrupted! [ 2322.593335] loop6: detected capacity change from 0 to 264192 11:03:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 7) [ 2322.604024] EXT4-fs (loop7): inodes count not valid: 266272 vs 32 [ 2322.609980] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.610755] EXT4-fs (loop6): group descriptors corrupted! [ 2322.628917] FAULT_INJECTION: forcing a failure. [ 2322.628917] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.630569] CPU: 0 UID: 0 PID: 17221 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2322.630601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2322.630615] Call Trace: [ 2322.630624] [ 2322.630633] dump_stack_lvl+0xfa/0x120 [ 2322.630680] should_fail_ex+0x4d7/0x5e0 [ 2322.630721] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 2322.630750] should_failslab+0xc2/0x120 [ 2322.630773] __kmalloc_noprof+0xb4/0x4b0 [ 2322.630820] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2322.630878] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 2322.630938] genl_family_rcv_msg_doit+0xab/0x2f0 [ 2322.630983] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2322.631037] ? cap_capable+0xdb/0x3b0 [ 2322.631094] ? security_capable+0x2f/0x90 [ 2322.631133] ? ns_capable+0xe2/0x120 [ 2322.631190] genl_rcv_msg+0x532/0x7e0 [ 2322.631240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2322.631277] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2322.631312] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 2322.631335] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2322.631373] netlink_rcv_skb+0x147/0x430 [ 2322.631396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2322.631423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2322.631461] ? netlink_deliver_tap+0x1ae/0xce0 [ 2322.631496] ? selinux_netlink_send+0x507/0x880 [ 2322.631531] ? is_vmalloc_addr+0x86/0xa0 [ 2322.631591] genl_rcv+0x28/0x40 [ 2322.631613] netlink_unicast+0x5a7/0x870 [ 2322.631657] ? __pfx_netlink_unicast+0x10/0x10 [ 2322.631710] netlink_sendmsg+0x8ac/0xd80 [ 2322.631739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2322.631775] ____sys_sendmsg+0xa67/0xc20 [ 2322.631817] ? copy_msghdr_from_user+0xfb/0x150 [ 2322.631864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2322.631903] ? lock_acquire+0x15e/0x2f0 [ 2322.631933] ___sys_sendmsg+0x10f/0x1b0 [ 2322.631972] ? __pfx____sys_sendmsg+0x10/0x10 [ 2322.632007] ? perf_trace_lock+0xb5/0x5d0 [ 2322.632038] ? __pfx_perf_trace_lock+0x10/0x10 [ 2322.632061] ? proc_fail_nth_write+0x97/0x220 [ 2322.632103] ? lock_acquire+0x15e/0x2f0 [ 2322.632126] ? __fget_files+0x34/0x3b0 [ 2322.632159] ? find_held_lock+0x2b/0x80 [ 2322.632191] ? __fget_files+0x203/0x3b0 [ 2322.632223] ? lock_release+0xc8/0x290 [ 2322.632252] ? __fget_files+0x20d/0x3b0 [ 2322.632297] __sys_sendmsg+0x150/0x200 [ 2322.632334] ? __pfx___sys_sendmsg+0x10/0x10 [ 2322.632383] ? __pfx_ksys_write+0x10/0x10 [ 2322.632433] do_syscall_64+0xbf/0x360 [ 2322.632459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2322.632483] RIP: 0033:0x7ff72c9b6b19 [ 2322.632501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2322.632522] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2322.632544] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2322.632560] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2322.632574] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.632589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2322.632602] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2322.632636] 11:03:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xae01000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200005004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2322.724321] loop6: detected capacity change from 0 to 264192 [ 2322.727143] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.727206] No source specified [ 2322.727861] EXT4-fs (loop6): group descriptors corrupted! [ 2322.731662] loop6: detected capacity change from 0 to 264192 [ 2322.735811] loop3: detected capacity change from 0 to 264192 [ 2322.741689] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.742595] EXT4-fs (loop6): group descriptors corrupted! [ 2322.745530] No source specified [ 2322.747910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.778202] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.779577] EXT4-fs (loop3): group descriptors corrupted! [ 2322.806268] loop7: detected capacity change from 0 to 512 [ 2322.812799] loop3: detected capacity change from 0 to 264192 [ 2322.813977] EXT4-fs (loop7): inodes count not valid: 327712 vs 32 [ 2322.818761] loop7: detected capacity change from 0 to 512 [ 2322.822594] EXT4-fs (loop7): inodes count not valid: 327712 vs 32 [ 2322.830568] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2322.832018] EXT4-fs (loop3): group descriptors corrupted! 11:03:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xaf01000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x72) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:03:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 8) 11:03:34 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[], 0x36) 11:03:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf420000000000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:03:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:03:34 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200006004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2334.283766] No source specified [ 2334.292320] No source specified [ 2334.296957] loop3: detected capacity change from 0 to 264192 [ 2334.298585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2334.298951] loop6: detected capacity change from 0 to 264192 [ 2334.301881] loop7: detected capacity change from 0 to 512 [ 2334.302836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2334.314193] EXT4-fs (loop7): inodes count not valid: 393248 vs 32 [ 2334.316783] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.318145] EXT4-fs (loop3): group descriptors corrupted! [ 2334.330144] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.331511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2334.333105] EXT4-fs (loop6): group descriptors corrupted! [ 2334.342628] loop3: detected capacity change from 0 to 264192 [ 2334.344815] loop7: detected capacity change from 0 to 512 [ 2334.357133] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.358508] EXT4-fs (loop3): group descriptors corrupted! [ 2334.359400] EXT4-fs (loop7): inodes count not valid: 393248 vs 32 11:03:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2334.373224] loop6: detected capacity change from 0 to 264192 11:03:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 9) [ 2334.389036] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.390612] EXT4-fs (loop6): group descriptors corrupted! [ 2334.435613] No source specified [ 2334.441266] No source specified 11:03:34 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200007004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2334.488621] FAULT_INJECTION: forcing a failure. [ 2334.488621] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.490288] CPU: 0 UID: 0 PID: 17260 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) 11:03:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xbfffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2334.490320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.490334] Call Trace: [ 2334.490343] [ 2334.490353] dump_stack_lvl+0xfa/0x120 [ 2334.490401] should_fail_ex+0x4d7/0x5e0 [ 2334.490443] should_failslab+0xc2/0x120 [ 2334.490467] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 2334.490503] ? __alloc_skb+0x2ab/0x370 [ 2334.490546] __alloc_skb+0x2ab/0x370 [ 2334.490581] ? __pfx___alloc_skb+0x10/0x10 [ 2334.490618] ? genl_rcv_msg+0x532/0x7e0 [ 2334.490655] netlink_ack+0x167/0xbf0 [ 2334.490689] netlink_rcv_skb+0x344/0x430 [ 2334.490712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2334.490739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2334.490778] ? netlink_deliver_tap+0x1ae/0xce0 [ 2334.490813] ? selinux_netlink_send+0x507/0x880 [ 2334.490851] ? is_vmalloc_addr+0x86/0xa0 [ 2334.490889] genl_rcv+0x28/0x40 [ 2334.490911] netlink_unicast+0x5a7/0x870 [ 2334.490955] ? __pfx_netlink_unicast+0x10/0x10 [ 2334.491008] netlink_sendmsg+0x8ac/0xd80 [ 2334.491036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2334.491080] ____sys_sendmsg+0xa67/0xc20 [ 2334.491112] ? copy_msghdr_from_user+0xfb/0x150 [ 2334.491150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2334.491190] ? lock_acquire+0x15e/0x2f0 [ 2334.491220] ___sys_sendmsg+0x10f/0x1b0 [ 2334.491258] ? __pfx____sys_sendmsg+0x10/0x10 [ 2334.491294] ? perf_trace_lock+0xb5/0x5d0 [ 2334.491324] ? __pfx_perf_trace_lock+0x10/0x10 [ 2334.491347] ? proc_fail_nth_write+0x97/0x220 [ 2334.491389] ? lock_acquire+0x15e/0x2f0 [ 2334.491412] ? __fget_files+0x34/0x3b0 [ 2334.491446] ? find_held_lock+0x2b/0x80 [ 2334.491478] ? __fget_files+0x203/0x3b0 [ 2334.491510] ? lock_release+0xc8/0x290 [ 2334.491539] ? __fget_files+0x20d/0x3b0 [ 2334.491583] __sys_sendmsg+0x150/0x200 [ 2334.491621] ? __pfx___sys_sendmsg+0x10/0x10 [ 2334.491683] ? __pfx_ksys_write+0x10/0x10 [ 2334.491730] do_syscall_64+0xbf/0x360 [ 2334.491756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.491780] RIP: 0033:0x7ff72c9b6b19 [ 2334.491798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.491821] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2334.491843] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2334.491859] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2334.491873] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.491887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.491900] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2334.491934] 11:03:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2334.541643] loop7: detected capacity change from 0 to 512 [ 2334.547000] EXT4-fs (loop7): inodes count not valid: 458784 vs 32 [ 2334.588658] No source specified [ 2334.590706] loop3: detected capacity change from 0 to 264192 11:03:34 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200009004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2334.594013] No source specified [ 2334.603232] loop6: detected capacity change from 0 to 264192 [ 2334.606650] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.608231] EXT4-fs (loop3): group descriptors corrupted! [ 2334.619826] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.621318] EXT4-fs (loop6): group descriptors corrupted! [ 2334.626032] loop3: detected capacity change from 0 to 264192 [ 2334.644423] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.646047] EXT4-fs (loop3): group descriptors corrupted! [ 2334.654728] loop6: detected capacity change from 0 to 264192 11:03:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 10) [ 2334.685328] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2334.686697] EXT4-fs (loop6): group descriptors corrupted! [ 2334.705654] loop7: detected capacity change from 0 to 512 [ 2334.726996] EXT4-fs (loop7): inodes count not valid: 589856 vs 32 [ 2334.728108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2334.765771] loop7: detected capacity change from 0 to 512 [ 2334.781500] EXT4-fs (loop7): inodes count not valid: 589856 vs 32 [ 2334.794006] FAULT_INJECTION: forcing a failure. [ 2334.794006] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.795914] CPU: 1 UID: 0 PID: 17274 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2334.795945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.795958] Call Trace: [ 2334.795966] [ 2334.795975] dump_stack_lvl+0xfa/0x120 [ 2334.796020] should_fail_ex+0x4d7/0x5e0 [ 2334.796060] should_failslab+0xc2/0x120 [ 2334.796090] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 2334.796128] ? __alloc_skb+0x2ab/0x370 [ 2334.796176] __alloc_skb+0x2ab/0x370 [ 2334.796217] ? __pfx___alloc_skb+0x10/0x10 [ 2334.796256] ? genl_rcv_msg+0x532/0x7e0 [ 2334.796294] netlink_ack+0x167/0xbf0 [ 2334.796328] netlink_rcv_skb+0x344/0x430 [ 2334.796351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2334.796381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2334.796421] ? netlink_deliver_tap+0x1ae/0xce0 [ 2334.796461] ? selinux_netlink_send+0x507/0x880 [ 2334.796501] ? is_vmalloc_addr+0x86/0xa0 [ 2334.796542] genl_rcv+0x28/0x40 [ 2334.796565] netlink_unicast+0x5a7/0x870 [ 2334.796612] ? __pfx_netlink_unicast+0x10/0x10 [ 2334.796670] netlink_sendmsg+0x8ac/0xd80 [ 2334.796699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2334.796741] ____sys_sendmsg+0xa67/0xc20 [ 2334.796779] ? copy_msghdr_from_user+0xfb/0x150 [ 2334.796820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2334.796861] ? lock_acquire+0x15e/0x2f0 [ 2334.796892] ___sys_sendmsg+0x10f/0x1b0 [ 2334.796932] ? __pfx____sys_sendmsg+0x10/0x10 [ 2334.796970] ? perf_trace_lock+0xb5/0x5d0 [ 2334.797001] ? __pfx_perf_trace_lock+0x10/0x10 [ 2334.797027] ? proc_fail_nth_write+0x97/0x220 [ 2334.797077] ? lock_acquire+0x15e/0x2f0 [ 2334.797102] ? __fget_files+0x34/0x3b0 [ 2334.797141] ? find_held_lock+0x2b/0x80 [ 2334.797174] ? __fget_files+0x203/0x3b0 [ 2334.797207] ? lock_release+0xc8/0x290 [ 2334.797238] ? __fget_files+0x20d/0x3b0 [ 2334.797289] __sys_sendmsg+0x150/0x200 [ 2334.797330] ? __pfx___sys_sendmsg+0x10/0x10 [ 2334.797383] ? __pfx_ksys_write+0x10/0x10 [ 2334.797439] do_syscall_64+0xbf/0x360 [ 2334.797468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.797495] RIP: 0033:0x7ff72c9b6b19 [ 2334.797518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.797546] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2334.797571] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2334.797586] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2334.797602] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.797620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2334.797636] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2334.797671] [ 2337.423920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2337.426748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2337.430808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2337.436333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2337.442577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2339.462507] Bluetooth: hci1: command tx timeout [ 2341.511114] Bluetooth: hci1: command tx timeout [ 2343.558214] Bluetooth: hci1: command tx timeout [ 2345.608436] Bluetooth: hci1: command tx timeout [ 2355.162757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.163999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2355.217587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.218362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2355.334418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2355.641910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:04:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x810) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="badb4364cad003cade1e050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="ed1373f05d63ee9847cf82a3945e4280da15b6185a3415cecd957147f0c433c899e627c3d292598a4868ca1c"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) 11:04:05 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:04:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 11) 11:04:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:04:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000a004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe818000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:05 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[], 0x36) [ 2365.443040] No source specified [ 2365.460915] No source specified [ 2365.465032] loop6: detected capacity change from 0 to 264192 [ 2365.467879] loop7: detected capacity change from 0 to 512 [ 2365.471897] loop3: detected capacity change from 0 to 264192 [ 2365.484765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.486355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.491320] EXT4-fs (loop7): inodes count not valid: 655392 vs 32 [ 2365.492117] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2365.493647] EXT4-fs (loop6): group descriptors corrupted! [ 2365.493692] FAULT_INJECTION: forcing a failure. [ 2365.493692] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.497022] CPU: 1 UID: 0 PID: 17751 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2365.497053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.497074] Call Trace: [ 2365.497082] [ 2365.497092] dump_stack_lvl+0xfa/0x120 [ 2365.497143] should_fail_ex+0x4d7/0x5e0 [ 2365.497185] should_failslab+0xc2/0x120 [ 2365.497209] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 2365.497245] ? __alloc_skb+0x2ab/0x370 [ 2365.497289] __alloc_skb+0x2ab/0x370 [ 2365.497324] ? __pfx___alloc_skb+0x10/0x10 [ 2365.497361] ? trace_rdev_return_int+0x153/0x1c0 [ 2365.497399] ? rdev_scan+0x158/0x300 [ 2365.497439] nl80211_send_scan_start+0x2d/0x190 [ 2365.497467] nl80211_trigger_scan+0x1098/0x1cf0 [ 2365.497505] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 2365.497534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2365.497574] ? security_capable+0x2f/0x90 [ 2365.497600] ? ns_capable+0xe2/0x120 [ 2365.497636] genl_rcv_msg+0x532/0x7e0 [ 2365.497666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2365.497692] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2365.497726] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 2365.497748] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2365.497787] netlink_rcv_skb+0x147/0x430 [ 2365.497809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2365.497837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2365.497875] ? netlink_deliver_tap+0x1ae/0xce0 [ 2365.497910] ? selinux_netlink_send+0x507/0x880 [ 2365.497947] ? is_vmalloc_addr+0x86/0xa0 [ 2365.497986] genl_rcv+0x28/0x40 [ 2365.498007] netlink_unicast+0x5a7/0x870 [ 2365.498051] ? __pfx_netlink_unicast+0x10/0x10 [ 2365.498104] netlink_sendmsg+0x8ac/0xd80 [ 2365.498133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2365.498170] ____sys_sendmsg+0xa67/0xc20 [ 2365.498202] ? copy_msghdr_from_user+0xfb/0x150 [ 2365.498240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2365.498280] ? lock_acquire+0x15e/0x2f0 [ 2365.498309] ___sys_sendmsg+0x10f/0x1b0 [ 2365.498348] ? __pfx____sys_sendmsg+0x10/0x10 [ 2365.498383] ? perf_trace_lock+0xb5/0x5d0 [ 2365.498413] ? __pfx_perf_trace_lock+0x10/0x10 [ 2365.498436] ? proc_fail_nth_write+0x97/0x220 [ 2365.498478] ? lock_acquire+0x15e/0x2f0 [ 2365.498501] ? __fget_files+0x34/0x3b0 [ 2365.498535] ? find_held_lock+0x2b/0x80 [ 2365.498567] ? __fget_files+0x203/0x3b0 [ 2365.498599] ? lock_release+0xc8/0x290 [ 2365.498627] ? __fget_files+0x20d/0x3b0 [ 2365.498673] __sys_sendmsg+0x150/0x200 [ 2365.498710] ? __pfx___sys_sendmsg+0x10/0x10 [ 2365.498759] ? __pfx_ksys_write+0x10/0x10 [ 2365.498807] do_syscall_64+0xbf/0x360 [ 2365.498834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2365.498857] RIP: 0033:0x7ff72c9b6b19 [ 2365.498876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.498897] RSP: 002b:00007ff729f2c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2365.498920] RAX: ffffffffffffffda RBX: 00007ff72cac9f60 RCX: 00007ff72c9b6b19 [ 2365.498936] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 2365.498951] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.498966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.498982] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2365.499017] [ 2365.553142] loop7: detected capacity change from 0 to 512 [ 2365.561698] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2365.563002] EXT4-fs (loop3): group descriptors corrupted! [ 2365.566521] EXT4-fs (loop7): inodes count not valid: 655392 vs 32 [ 2365.571022] loop6: detected capacity change from 0 to 264192 [ 2365.578219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.587052] loop3: detected capacity change from 0 to 264192 [ 2365.588222] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2365.589697] EXT4-fs (loop6): group descriptors corrupted! [ 2365.603895] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2365.605348] EXT4-fs (loop3): group descriptors corrupted! 11:04:05 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)={[{@data_err_abort}]}) 11:04:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 12) 11:04:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000b004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2365.689982] No source specified [ 2365.695139] No source specified 11:04:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:05 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2365.783309] loop7: detected capacity change from 0 to 512 [ 2365.786469] loop3: detected capacity change from 0 to 264192 11:04:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) (fail_nth: 13) [ 2365.797758] EXT4-fs (loop7): inodes count not valid: 720928 vs 32 [ 2365.812129] loop7: detected capacity change from 0 to 512 [ 2365.818486] EXT4-fs (loop7): inodes count not valid: 720928 vs 32 [ 2365.840386] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2365.842288] EXT4-fs (loop3): group descriptors corrupted! [ 2365.875407] No source specified [ 2365.880002] loop3: detected capacity change from 0 to 264192 [ 2365.882578] FAULT_INJECTION: forcing a failure. [ 2365.882578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2365.884538] CPU: 1 UID: 0 PID: 17765 Comm: syz-executor.0 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2365.884570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.884584] Call Trace: [ 2365.884592] [ 2365.884601] dump_stack_lvl+0xfa/0x120 [ 2365.884648] should_fail_ex+0x4d7/0x5e0 [ 2365.884689] _copy_to_user+0x32/0xd0 [ 2365.884731] simple_read_from_buffer+0xe0/0x180 [ 2365.884765] proc_fail_nth_read+0x18a/0x240 [ 2365.884804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2365.884842] ? security_file_permission+0x22/0x90 [ 2365.884875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2365.884913] vfs_read+0x1eb/0xc70 [ 2365.884954] ? __pfx_vfs_read+0x10/0x10 [ 2365.884991] ? lock_release+0xc8/0x290 [ 2365.885021] ? __fget_files+0x20d/0x3b0 [ 2365.885075] ksys_read+0x121/0x240 11:04:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2365.885109] ? __pfx_ksys_read+0x10/0x10 [ 2365.885155] do_syscall_64+0xbf/0x360 [ 2365.885181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2365.885204] RIP: 0033:0x7ff72c96969c [ 2365.885222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2365.885244] RSP: 002b:00007ff729f2c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2365.885267] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007ff72c96969c [ 2365.885282] RDX: 000000000000000f RSI: 00007ff729f2c1e0 RDI: 0000000000000004 [ 2365.885296] RBP: 00007ff729f2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.885310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.885324] R13: 00007ffca499888f R14: 00007ff729f2c300 R15: 0000000000022000 [ 2365.885358] [ 2365.910930] No source specified 11:04:06 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2365.924287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.947988] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2365.949316] EXT4-fs (loop3): group descriptors corrupted! 11:04:06 executing program 1: ustat(0x8, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:04:06 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) 11:04:06 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000c004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2366.022973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2366.078800] loop7: detected capacity change from 0 to 512 [ 2366.104033] EXT4-fs (loop7): inodes count not valid: 786464 vs 32 [ 2366.118942] loop7: detected capacity change from 0 to 512 [ 2366.121031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2366.128623] EXT4-fs (loop7): inodes count not valid: 786464 vs 32 [ 2366.130900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:04:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)={[{@data_err_abort}]}) 11:04:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x30, r1, 0x5, 0x0, 0xfffffffe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:04:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:15 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) 11:04:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000d004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:04:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2375.519708] loop6: detected capacity change from 0 to 264192 [ 2375.527809] loop3: detected capacity change from 0 to 264192 [ 2375.535409] loop7: detected capacity change from 0 to 512 [ 2375.546534] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.547947] EXT4-fs (loop6): group descriptors corrupted! [ 2375.552552] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.553914] EXT4-fs (loop3): group descriptors corrupted! [ 2375.554801] No source specified [ 2375.557856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2375.558760] EXT4-fs (loop7): inodes count not valid: 852000 vs 32 [ 2375.562146] No source specified [ 2375.579780] loop6: detected capacity change from 0 to 264192 [ 2375.581987] loop7: detected capacity change from 0 to 512 [ 2375.582847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2375.596235] loop3: detected capacity change from 0 to 264192 [ 2375.604622] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.606002] EXT4-fs (loop6): group descriptors corrupted! [ 2375.607939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2375.609480] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.611106] EXT4-fs (loop3): group descriptors corrupted! [ 2375.616665] EXT4-fs (loop7): inodes count not valid: 852000 vs 32 11:04:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:04:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)={[{@data_err_abort}]}) 11:04:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000e004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2375.819033] loop7: detected capacity change from 0 to 512 [ 2375.822649] loop3: detected capacity change from 0 to 264192 [ 2375.823915] No source specified [ 2375.827016] loop6: detected capacity change from 0 to 264192 [ 2375.828890] No source specified [ 2375.840898] EXT4-fs (loop7): inodes count not valid: 917536 vs 32 11:04:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2375.847718] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.849301] EXT4-fs (loop3): group descriptors corrupted! [ 2375.851574] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.853137] EXT4-fs (loop6): group descriptors corrupted! [ 2375.859557] loop7: detected capacity change from 0 to 512 [ 2375.869016] EXT4-fs (loop7): inodes count not valid: 917536 vs 32 [ 2375.876384] loop3: detected capacity change from 0 to 264192 [ 2375.889530] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.891116] EXT4-fs (loop3): group descriptors corrupted! 11:04:16 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)={[{@data_err_abort}]}) 11:04:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200410004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:04:16 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) [ 2376.042602] No source specified [ 2376.045922] No source specified [ 2376.046393] loop7: detected capacity change from 0 to 512 [ 2376.066757] EXT4-fs (loop7): inodes count not valid: 1049632 vs 32 [ 2376.084517] loop7: detected capacity change from 0 to 512 [ 2376.093388] EXT4-fs (loop7): inodes count not valid: 1049632 vs 32 [ 2376.105901] loop6: detected capacity change from 0 to 264192 [ 2376.128146] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2376.130191] EXT4-fs (loop6): group descriptors corrupted! [ 2376.138663] loop6: detected capacity change from 0 to 264192 [ 2376.150169] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2376.151713] EXT4-fs (loop6): group descriptors corrupted! [ 2376.164852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2376.197169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2378.894556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2378.897545] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2378.901851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2378.906958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2378.909772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2380.933256] Bluetooth: hci5: command tx timeout [ 2382.981157] Bluetooth: hci5: command tx timeout [ 2385.029231] Bluetooth: hci5: command tx timeout [ 2387.078159] Bluetooth: hci5: command tx timeout [ 2397.189831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2397.191100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2397.237294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2397.238670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2397.354554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:04:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)={[{@data_err_abort}]}) 11:04:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:04:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="202010004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) connect$unix(r7, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x144, r8, 0x4, 0x70bd29, 0x8, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8004}, 0x48042) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c0}, 0x4044004) 11:04:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080028bd7000fbdbdf2500000000080001005c3c000b3e8000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x5) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) [ 2407.327869] loop6: detected capacity change from 0 to 264192 [ 2407.334019] loop3: detected capacity change from 0 to 264192 [ 2407.336463] loop7: detected capacity change from 0 to 512 [ 2407.338805] No source specified [ 2407.343125] No source specified [ 2407.346024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.350047] EXT4-fs (loop7): inodes count not valid: 1056800 vs 32 [ 2407.352394] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.353273] EXT4-fs (loop3): group descriptors corrupted! [ 2407.357046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.360565] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.362128] EXT4-fs (loop6): group descriptors corrupted! [ 2407.366283] loop3: detected capacity change from 0 to 264192 [ 2407.367445] loop7: detected capacity change from 0 to 512 [ 2407.373357] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.374127] EXT4-fs (loop3): group descriptors corrupted! [ 2407.377886] EXT4-fs (loop7): inodes count not valid: 1056800 vs 32 [ 2407.383512] loop6: detected capacity change from 0 to 264192 11:04:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2407.400632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.403289] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.404648] EXT4-fs (loop6): group descriptors corrupted! 11:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2407.441819] No source specified [ 2407.444021] No source specified 11:04:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201c17004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2407.457902] loop3: detected capacity change from 0 to 264192 [ 2407.469665] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.470503] EXT4-fs (loop3): group descriptors corrupted! 11:04:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2407.483924] loop3: detected capacity change from 0 to 264192 [ 2407.492670] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.493532] EXT4-fs (loop3): group descriptors corrupted! 11:04:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2407.533723] No source specified [ 2407.539654] No source specified 11:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2407.574615] loop7: detected capacity change from 0 to 512 11:04:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2407.592465] loop6: detected capacity change from 0 to 264192 [ 2407.593000] EXT4-fs (loop7): inodes count not valid: 1514528 vs 32 [ 2407.595851] loop3: detected capacity change from 0 to 264192 [ 2407.603360] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.604920] EXT4-fs (loop6): group descriptors corrupted! 11:04:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2407.625910] loop6: detected capacity change from 0 to 264192 [ 2407.632296] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.633824] EXT4-fs (loop3): group descriptors corrupted! 11:04:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="202017004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2407.652022] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.653570] EXT4-fs (loop6): group descriptors corrupted! [ 2407.668952] loop3: detected capacity change from 0 to 264192 [ 2407.674369] No source specified [ 2407.683110] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.683833] EXT4-fs (loop3): group descriptors corrupted! [ 2407.689506] No source specified [ 2407.716346] loop7: detected capacity change from 0 to 512 [ 2407.724419] EXT4-fs (loop7): inodes count not valid: 1515552 vs 32 11:04:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:04:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2407.746197] loop7: detected capacity change from 0 to 512 [ 2407.754232] EXT4-fs (loop7): inodes count not valid: 1515552 vs 32 11:04:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:04:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2407.793832] loop3: detected capacity change from 0 to 264192 [ 2407.822607] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.824246] EXT4-fs (loop3): group descriptors corrupted! [ 2407.832322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.836794] loop6: detected capacity change from 0 to 264192 [ 2407.840137] loop3: detected capacity change from 0 to 264192 [ 2407.851476] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.852223] EXT4-fs (loop6): group descriptors corrupted! [ 2407.854622] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.856176] EXT4-fs (loop3): group descriptors corrupted! [ 2407.856983] loop6: detected capacity change from 0 to 264192 [ 2407.860265] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2407.861111] EXT4-fs (loop6): group descriptors corrupted! [ 2407.881804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.894565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2410.447626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2410.451679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2410.454999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2410.461285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2410.465039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2412.485400] Bluetooth: hci5: command tx timeout [ 2414.535355] Bluetooth: hci5: command tx timeout [ 2416.581141] Bluetooth: hci5: command tx timeout [ 2418.629195] Bluetooth: hci5: command tx timeout [ 2428.750516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2428.751584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2428.830162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2428.831508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2428.933340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:05:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xb, &(0x7f0000000300)={[{@data_err_abort}]}) 11:05:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="202117004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:05:20 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2439.834964] loop7: detected capacity change from 0 to 512 [ 2439.839459] EXT4-fs (loop7): inodes count not valid: 1515808 vs 32 11:05:20 executing program 4: truncate(&(0x7f0000000180)='./file0\x00', 0x7fff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, '\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:05:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2439.866558] loop7: detected capacity change from 0 to 512 [ 2439.874355] EXT4-fs (loop7): inodes count not valid: 1515808 vs 32 [ 2439.905940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2439.910637] No source specified [ 2439.915681] No source specified [ 2439.922654] loop3: detected capacity change from 0 to 264192 11:05:20 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20171c004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2439.936806] loop6: detected capacity change from 0 to 264192 11:05:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000329bd7000fbdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="10009d00000000003f0002000200113e0500190102000000f9ff33000101010101010000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r7 = dup2(r4, r5) connect$unix(r7, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = syz_open_dev$mouse(&(0x7f0000000140), 0x5, 0x4000) sendmsg$NL80211_CMD_SET_MPATH(r8, 0x0, 0x4040841) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r9, r10) connect$unix(r11, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x50, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xfffd}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}}, 0x4051) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05000000000000003f000000000008000300", @ANYRES32=r2, @ANYBLOB="1e50f2732055ce2f16486c2a7bde6d49cabd8f50fee19d01a265a3b86242819620308338508e1648a396480c8d15c6ee50b25290607e2cce0aca17bd298d04abbbb024674efd6cd5919eb307ca93ba57b1"], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008fe06c538010897ccbfd1"], 0x36) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x130) [ 2439.942775] loop7: detected capacity change from 0 to 512 [ 2439.945326] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2439.947033] EXT4-fs (loop3): group descriptors corrupted! [ 2439.952242] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2439.953004] EXT4-fs (loop6): group descriptors corrupted! [ 2439.954505] EXT4-fs (loop7): inodes count not valid: 1840928 vs 32 [ 2439.968344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2439.973772] loop6: detected capacity change from 0 to 264192 [ 2439.976163] loop3: detected capacity change from 0 to 264192 [ 2439.985535] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2439.986414] EXT4-fs (loop6): group descriptors corrupted! [ 2439.997644] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2440.001784] EXT4-fs (loop3): group descriptors corrupted! [ 2440.009279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2440.016587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2440.332712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2440.349449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:05:31 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300)={[{@data_err_abort}]}) 11:05:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:05:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200020004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40091) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r10 = dup2(r3, r4) connect$unix(r10, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x11c, r11, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0xb0, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xa5, 0x3, "4a35d98dbb4ba8f67129a24a45ebaba30ebc272975ad20278f0a588fd41df3d90270665b9a040698786fcbdfddb3073199136fd5e734074af6d47f5ddd2f0e7af3237827dca53c390ca83a09cc68f5d12699c649cefa7b51f2354915584982dc439baeb41e0125898f8ed1000ed298b03b07e2fc7382db32cd3785aa9ed0cac3f135e7ab592c0a30c14413d6ed24ac8705eb0e8e6eb3319abbce4e3fda86520889"}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd4}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7f}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xd2}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x30}, {0x6}, {0x9, 0x1}, {0x18}, {0x24, 0x1}, {0x29}, {0x4}, {0x2, 0x1}, {0x1b, 0x1}, {0x30}, {0xc, 0x1}, {0x3}, {0x30, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x48, 0x1}, {0x5, 0x1}, {0x12}, {0x1b, 0x1}, {0x76, 0x1}, {0x4}, {0x6c}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {}, @device_a, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0xd}, {0x7, 0x517}}}, 0x14) 11:05:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:05:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r3, r5) connect$unix(r6, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="d0424fb8ced78f5107658d86b4cd881d2cc74725deccd01111a102601c70beb4c41435b2c46de3902a3976edb57928e74849c1b4e94d757a595d3a955ea5cc003195210239917541c4271683df0966e58421d1ffd85694c896ce44f214d4c24e0ea757b9522f9850fc8bfd40fe5315b77dc303ee6394413b0b", @ANYRESHEX], 0x36) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1f}}, './file0\x00'}) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) [ 2450.999803] loop7: detected capacity change from 0 to 512 [ 2451.002625] loop6: detected capacity change from 0 to 264192 [ 2451.031549] EXT4-fs (loop7): inodes count not valid: 2097184 vs 32 [ 2451.034282] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.035728] EXT4-fs (loop6): group descriptors corrupted! [ 2451.043540] loop3: detected capacity change from 0 to 264192 [ 2451.050934] loop7: detected capacity change from 0 to 512 [ 2451.056762] No source specified [ 2451.065502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2451.069172] No source specified [ 2451.071387] loop6: detected capacity change from 0 to 264192 [ 2451.073439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2451.077259] EXT4-fs (loop7): inodes count not valid: 2097184 vs 32 [ 2451.078006] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.079731] EXT4-fs (loop3): group descriptors corrupted! [ 2451.093642] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.095202] EXT4-fs (loop6): group descriptors corrupted! [ 2451.101861] loop3: detected capacity change from 0 to 264192 [ 2451.106556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2451.114049] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.115877] EXT4-fs (loop3): group descriptors corrupted! [ 2451.122250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:05:31 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x24, &(0x7f0000000300)={[{@data_err_abort}]}) 11:05:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201020004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffff0700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2451.281355] loop7: detected capacity change from 0 to 512 [ 2451.283043] loop3: detected capacity change from 0 to 264192 [ 2451.287807] loop6: detected capacity change from 0 to 264192 [ 2451.304000] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.305557] EXT4-fs (loop6): group descriptors corrupted! [ 2451.307774] EXT4-fs (loop7): inodes count not valid: 2101280 vs 32 11:05:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:05:31 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x43, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2451.324170] loop7: detected capacity change from 0 to 512 [ 2451.329503] loop6: detected capacity change from 0 to 264192 [ 2451.330669] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.331916] EXT4-fs (loop3): group descriptors corrupted! [ 2451.334323] EXT4-fs (loop7): inodes count not valid: 2101280 vs 32 [ 2451.340655] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.341927] EXT4-fs (loop6): group descriptors corrupted! [ 2451.359165] loop3: detected capacity change from 0 to 264192 [ 2451.374922] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.376187] EXT4-fs (loop3): group descriptors corrupted! [ 2451.386784] ======================================================= [ 2451.386784] WARNING: The mand mount option has been deprecated and [ 2451.386784] and is ignored by this kernel. Remove the mand [ 2451.386784] option from the mount to silence this warning. [ 2451.386784] ======================================================= [ 2451.400241] No source specified [ 2451.403704] No source specified [ 2451.420397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:05:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201720004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffff000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:31 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x45, &(0x7f0000000300)={[{@data_err_abort}]}) 11:05:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:05:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2451.520504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2451.546726] loop7: detected capacity change from 0 to 512 [ 2451.558758] EXT4-fs (loop7): inodes count not valid: 2103072 vs 32 [ 2451.571631] loop3: detected capacity change from 0 to 264192 [ 2451.574408] loop7: detected capacity change from 0 to 512 [ 2451.581994] EXT4-fs (loop7): inodes count not valid: 2103072 vs 32 [ 2451.594150] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.595447] EXT4-fs (loop3): group descriptors corrupted! [ 2451.611338] loop6: detected capacity change from 0 to 264192 [ 2451.615414] loop3: detected capacity change from 0 to 264192 [ 2451.619946] No source specified [ 2451.621629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2451.624777] No source specified [ 2451.635766] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.637377] EXT4-fs (loop6): group descriptors corrupted! [ 2451.638963] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.640040] EXT4-fs (loop3): group descriptors corrupted! [ 2451.663259] loop6: detected capacity change from 0 to 264192 [ 2451.684671] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2451.686109] EXT4-fs (loop6): group descriptors corrupted! [ 2461.318160] Bluetooth: hci1: command 0x0406 tx timeout 11:05:42 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="201721004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:05:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:42 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)={[{@data_err_abort}]}) 11:05:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000fcb9722584", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:05:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:05:42 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000400)=ANY=[], 0x36) [ 2461.845951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2461.846866] No source specified [ 2461.847775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2461.857504] loop6: detected capacity change from 0 to 264192 [ 2461.858621] No source specified [ 2461.864410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2461.867845] loop3: detected capacity change from 0 to 264192 [ 2461.874252] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2461.875239] EXT4-fs (loop3): group descriptors corrupted! [ 2461.876537] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2461.877614] EXT4-fs (loop6): group descriptors corrupted! [ 2461.879878] loop7: detected capacity change from 0 to 512 [ 2461.886253] loop6: detected capacity change from 0 to 264192 [ 2461.888712] loop3: detected capacity change from 0 to 264192 [ 2461.893510] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2461.894473] EXT4-fs (loop3): group descriptors corrupted! [ 2461.897039] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2461.898184] EXT4-fs (loop6): group descriptors corrupted! [ 2461.901142] EXT4-fs (loop7): inodes count not valid: 2168608 vs 32 [ 2461.939154] loop7: detected capacity change from 0 to 512 [ 2461.959115] EXT4-fs (loop7): inodes count not valid: 2168608 vs 32 11:05:42 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2462.012153] No source specified [ 2462.014031] No source specified [ 2462.181678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:05:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffbf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50033bc7f06d88d03f3ed12300000008fe00160000c90d1778fe270dac22e604a968"], 0x36) 11:05:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80050000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) open(&(0x7f0000000bc0)='./file0\x00', 0x121000, 0x4) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)={0x20000, 0x84, 0x8}, 0x18) sendmsg$unix(r1, &(0x7f0000000e00)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="bffbf317dfe6d15f6159f386c89d7c2e9b45913bf52d2165368e22337892930acec926a1ac0aaa41b5fa336108e0e57d45cee548a3e5df1b4dcf1213dfd25624032fbb613ed4ba33ca4c2650c271e1010ea4636ffa05f97c8aab6e0ccc7b18dde8eeb2e07ed04e7677cce739c9726e194175ab9dd07771c8d516cefc7ccb6dbe339ad3c8e2b2f9cdafb1892e89ef2332f730c175aff05a2922f59306fe2d32ef88cffe8194e63035a9f5", 0xaa}, {&(0x7f0000000440)="5a69c70a9495fa53cc17126d6a88a5099b706538f0639fb71dfd254d11c0108fa192eba0501d2a27baa61157affbaf35e513a0baab64c118bcff3afab921872610965b6d5bb325701edbb8a08fda2fdd6fa9eb78446a7c899946969f1c69179ce6a9b4415b18fd26528f574c82fdbc1b63f47a449e68ed4af92a90fcd8a92f79a24b4d20289705d5bddc19c54ab182d2544ca014157f5b467bb2d7355648ed05cb741d72267226a57811b130b5288e542f511690e0d6819241f85d4553b63f10795458b57b63ea026932464f9bca70539c8986c64b2632b560cbc927ba82c659c8470d6bedce1d96f6c496ef", 0xec}, {&(0x7f0000000540)="9dd97f3a1038b4a95d02a044898c22a246d5bef79fe17812b70b309060827faa31f60f017fbe5197bac175e2caf7b04f7b825b1766b4de286cbfecf87388532ffc00466c4ad94071aa0bdc9616b0a01795b8c5dabd5e649330dae134366186fc77ced0b9bffa6fb4366760839266a4f48836a1fc4fce6d6553c6fba67fd7adc4e90f5559cf280d0c8183d140ce81a407d0c93521bc925aabac5da7f47b155885cf6fbc424b239076bd733c56d13a7708fad682db86a6bf377a5af5a7a8fe73b04912763418653d520c76d8730b233c", 0xcf}, {&(0x7f0000000640)="5eed5b211bccaeb3a62fec67862ed1a3842221dc1c0ff5adabe74182fdd3503919cf55ac93ca18957c199939ce6199b0ec4b3d274e0df250298ee2163724417eda8edf73a7afaf567e2bf0f798ee1e5eb3a6e651c2f7e20682a85c47bc491da00f50772b5b210f2c894af999f42c1ae8418fb13a7dc1da668c9baafcb7dc1e1f323d9c0c4fef620434fe8baab79e44c8a84daabbe0f87a600f8a2acd2f7356e195db4d54f5c3804e79ceed1b0cad90f89bd9edb26d248250eb48b740e73d667bfbf6aaec5335c7279528efca31d9ece3", 0xd0}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r1, r2, 0xffffffffffffffff, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee00}}}, @rights={{0x10}}], 0x130, 0x840}, 0x20000010) r9 = dup2(r1, r2) connect$unix(r9, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4054) 11:05:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200024004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:05:51 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000000300)={[{@data_err_abort}]}) 11:05:51 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:05:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2471.362348] No source specified [ 2471.363341] No source specified 11:05:51 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2471.413432] loop7: detected capacity change from 0 to 512 [ 2471.423853] No source specified [ 2471.427174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2471.429606] No source specified [ 2471.439976] loop3: detected capacity change from 0 to 264192 11:05:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2471.455755] loop6: detected capacity change from 0 to 264192 [ 2471.457387] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2471.458299] EXT4-fs (loop3): group descriptors corrupted! [ 2471.461704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:05:51 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x900, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2471.469892] EXT4-fs (loop7): inodes count not valid: 2359328 vs 32 [ 2471.471525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2471.477884] loop3: detected capacity change from 0 to 264192 [ 2471.485352] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2471.486180] EXT4-fs (loop3): group descriptors corrupted! [ 2471.491543] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2471.492297] EXT4-fs (loop6): group descriptors corrupted! [ 2471.497317] loop7: detected capacity change from 0 to 512 [ 2471.508309] loop6: detected capacity change from 0 to 264192 [ 2471.508795] EXT4-fs (loop7): inodes count not valid: 2359328 vs 32 [ 2471.519719] No source specified [ 2471.521796] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2471.522568] EXT4-fs (loop6): group descriptors corrupted! [ 2471.524466] No source specified 11:05:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2471.595891] loop3: detected capacity change from 0 to 264192 [ 2471.599533] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2471.600347] EXT4-fs (loop3): group descriptors corrupted! [ 2471.603985] loop3: detected capacity change from 0 to 264192 [ 2471.606908] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2471.607643] EXT4-fs (loop3): group descriptors corrupted! [ 2471.738496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2471.795777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:06:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200027004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000300)={[{@data_err_abort}]}) 11:06:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r6, r7) connect$unix(r8, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r9 = dup3(r4, r4, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r10, r11) connect$unix(r12, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r13 = accept4(r9, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x80, 0x80800) syz_genetlink_get_family_id$nl80211(0x0, r13) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="ef625982f33c43bebbbdff", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3200c9d1ea6f91e06e1be552f90879670000e4c49645380008bf359e5b5b54d824e9e1db85234ef4b50d046dcc0b2ac4240a1e397fb11c65022b5500"/76], 0x36) 11:06:00 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:06:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r1], 0x36) [ 2480.426800] loop7: detected capacity change from 0 to 512 [ 2480.433848] EXT4-fs (loop7): inodes count not valid: 2555936 vs 32 [ 2480.436605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2480.441782] loop7: detected capacity change from 0 to 512 [ 2480.445012] EXT4-fs (loop7): inodes count not valid: 2555936 vs 32 [ 2480.457804] No source specified [ 2480.460770] No source specified [ 2480.463583] loop3: detected capacity change from 0 to 264192 11:06:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20003f004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2480.483102] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.484562] EXT4-fs (loop3): group descriptors corrupted! [ 2480.486113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2480.495213] loop6: detected capacity change from 0 to 264192 [ 2480.500644] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.501515] EXT4-fs (loop6): group descriptors corrupted! [ 2480.502655] loop3: detected capacity change from 0 to 264192 [ 2480.503568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2480.513266] loop6: detected capacity change from 0 to 264192 [ 2480.515859] loop7: detected capacity change from 0 to 512 [ 2480.519940] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.520696] EXT4-fs (loop6): group descriptors corrupted! [ 2480.522683] EXT4-fs (loop7): inodes count not valid: 4128800 vs 32 [ 2480.526788] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.528140] loop7: detected capacity change from 0 to 512 [ 2480.528283] EXT4-fs (loop3): group descriptors corrupted! [ 2480.532681] EXT4-fs (loop7): inodes count not valid: 4128800 vs 32 11:06:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000300)={[{@data_err_abort}]}) 11:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x34a, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200040004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2480.604185] loop7: detected capacity change from 0 to 512 11:06:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2480.615830] EXT4-fs (loop7): inodes count not valid: 4194336 vs 32 11:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3e7, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2480.642410] No source specified [ 2480.645212] No source specified 11:06:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200043004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2480.666431] loop6: detected capacity change from 0 to 264192 [ 2480.677600] loop3: detected capacity change from 0 to 264192 [ 2480.680666] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.682262] EXT4-fs (loop6): group descriptors corrupted! [ 2480.685242] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.686000] EXT4-fs (loop3): group descriptors corrupted! [ 2480.693493] loop3: detected capacity change from 0 to 264192 [ 2480.698626] loop6: detected capacity change from 0 to 264192 [ 2480.702189] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.702933] EXT4-fs (loop3): group descriptors corrupted! 11:06:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200153004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2480.715993] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2480.717680] EXT4-fs (loop6): group descriptors corrupted! [ 2480.761723] loop7: detected capacity change from 0 to 512 [ 2480.775154] EXT4-fs (loop7): inodes count not valid: 5439776 vs 32 [ 2480.795822] loop7: detected capacity change from 0 to 512 [ 2480.806124] EXT4-fs (loop7): inodes count not valid: 5439776 vs 32 11:06:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2489.762025] loop6: detected capacity change from 0 to 4 11:06:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000400)=ANY=[], 0x36) 11:06:09 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200155004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:06:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:09 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:06:09 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2489.771719] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2489.779775] loop6: detected capacity change from 0 to 4 [ 2489.785519] EXT4-fs (loop6): Can't read superblock on 2nd try 11:06:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2489.833284] loop7: detected capacity change from 0 to 512 11:06:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x600, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2489.856690] EXT4-fs (loop7): inodes count not valid: 5570848 vs 32 [ 2489.858772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2489.860730] loop3: detected capacity change from 0 to 264192 [ 2489.862536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2489.892505] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2489.894205] EXT4-fs (loop3): group descriptors corrupted! [ 2489.900877] loop6: detected capacity change from 0 to 4 [ 2489.902545] loop7: detected capacity change from 0 to 512 [ 2489.906597] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2489.912122] loop6: detected capacity change from 0 to 4 [ 2489.918432] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2489.923760] EXT4-fs (loop7): inodes count not valid: 5570848 vs 32 [ 2489.929155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2489.930035] loop3: detected capacity change from 0 to 264192 11:06:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2489.961370] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2489.962981] EXT4-fs (loop3): group descriptors corrupted! 11:06:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200060004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2490.059580] loop6: detected capacity change from 0 to 4 11:06:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2490.090794] EXT4-fs (loop6): Can't read superblock on 2nd try 11:06:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20f4, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2490.191088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2490.201381] loop7: detected capacity change from 0 to 512 [ 2490.225709] EXT4-fs (loop7): inodes count not valid: 6291488 vs 32 [ 2490.235006] loop3: detected capacity change from 0 to 264192 [ 2490.255839] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2490.257452] EXT4-fs (loop3): group descriptors corrupted! [ 2490.265837] loop7: detected capacity change from 0 to 512 [ 2490.285651] EXT4-fs (loop7): inodes count not valid: 6291488 vs 32 [ 2490.311207] loop3: detected capacity change from 0 to 264192 [ 2490.324164] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2490.325549] EXT4-fs (loop3): group descriptors corrupted! [ 2493.080633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2493.084917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2493.090450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2493.095001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2493.098585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2493.203646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2493.205863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2493.208143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2493.213671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2493.218900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2495.173172] Bluetooth: hci0: command tx timeout [ 2495.302129] Bluetooth: hci1: command tx timeout [ 2497.222228] Bluetooth: hci0: command tx timeout [ 2497.349126] Bluetooth: hci1: command tx timeout [ 2499.269158] Bluetooth: hci0: command tx timeout [ 2499.397793] Bluetooth: hci1: command tx timeout [ 2501.317164] Bluetooth: hci0: command tx timeout [ 2501.445212] Bluetooth: hci1: command tx timeout [ 2503.452551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2503.453654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2503.502762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2503.503357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2503.587205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2503.892026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2507.825851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2507.826583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2507.850974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2507.851811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:06:36 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2400, &(0x7f0000000300)={[{@data_err_abort}]}) 11:06:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="00000000000000000000009c9f49e67c55801e777504aee79d151294e2a88208819ee434bf99d434aff3019df7b86adccc7a4721d7682b606a188895b9f57b"], 0x1c}}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:06:36 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200172004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f00000002c0)=0xe8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xff49, &(0x7f0000000080)={&(0x7f0000000240)={0x40, 0x0, 0x4, 0x70bd2c, 0xa5dfdc00, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x0, 0x31, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x0, 0x3a, 0x8cf}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0x6}]}, 0xfffffffffffffd72}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x14}, 0x4044040) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:06:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2516.656075] loop3: detected capacity change from 0 to 264192 [ 2516.662974] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2516.663731] EXT4-fs (loop3): group descriptors corrupted! [ 2516.674673] loop3: detected capacity change from 0 to 264192 [ 2516.678749] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2516.679576] EXT4-fs (loop3): group descriptors corrupted! 11:06:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x900, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2516.710321] loop6: detected capacity change from 0 to 4 [ 2516.714950] loop7: detected capacity change from 0 to 512 [ 2516.722492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2516.724555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2516.731841] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2516.732965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2516.734077] EXT4-fs (loop7): inodes count not valid: 7471392 vs 32 11:06:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5f22000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2516.748377] loop7: detected capacity change from 0 to 512 [ 2516.753141] loop6: detected capacity change from 0 to 4 11:06:36 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4300, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2516.762316] EXT4-fs (loop7): inodes count not valid: 7471392 vs 32 [ 2516.768253] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2516.790032] loop3: detected capacity change from 0 to 264192 [ 2516.796691] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2516.797463] EXT4-fs (loop3): group descriptors corrupted! 11:06:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:37 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f0004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7596ede800000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2516.835507] No source specified [ 2516.838290] No source specified 11:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc00, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2516.875098] loop3: detected capacity change from 0 to 264192 [ 2516.883181] loop6: detected capacity change from 0 to 4 11:06:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4500, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2516.889461] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2516.895152] loop6: detected capacity change from 0 to 4 [ 2516.902300] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2516.909665] loop7: detected capacity change from 0 to 512 [ 2516.915403] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2516.916756] EXT4-fs (loop3): group descriptors corrupted! [ 2516.920748] EXT4-fs (loop7): inodes count not valid: 15728672 vs 32 [ 2516.935363] loop7: detected capacity change from 0 to 512 11:06:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2516.948989] EXT4-fs (loop7): inodes count not valid: 15728672 vs 32 11:06:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd00, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2516.980217] loop6: detected capacity change from 0 to 4 [ 2516.987541] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2516.995897] loop6: detected capacity change from 0 to 4 [ 2517.002614] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2517.015308] No source specified [ 2517.019135] No source specified [ 2517.093377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:06:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0xfb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4018}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:06:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000f5004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000026c0), 0xc0200, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0xc, 0x8f, 0x0}) r7 = clone3(&(0x7f0000003840)={0x2000000, &(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780), {0x27}, &(0x7f00000027c0)=""/4096, 0x1000, &(0x7f00000037c0)=""/59, &(0x7f0000003800)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r3}}, 0x58) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r9) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) fchown(r10, 0xffffffffffffffff, r12) [ 2525.051557] loop6: detected capacity change from 0 to 4 [ 2525.060789] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2525.063045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.071450] loop6: detected capacity change from 0 to 4 [ 2525.076447] EXT4-fs (loop6): Can't read superblock on 2nd try sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003980)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000440)="6f112fa63ed5dd0182c0c718d5c5b83e69077e41f15f8061e2f05b0bbd8bfb448bf8b696709c5c008aebec66e9ccf105165aed8abd08dbc7027beaf746eb7ad126677d3b52cf4df9f6ca968776fe2694d9ec769c10e7ba1fc07917cb40d37459bd8925107edd9ffc741fdd3d65140259e2af7bc1faf0827b2b3a6c7b7697f215ccbb33b540047ff19cb67c7474e4f55eb94217a921789c3721df2e5ae2b10754edce7b39b6d30c0917bbb959f0a6ae97ca659b9328f50a06aebe8d2e43f2ab9aaad9a0581f977876dfe8a7a0a89b109d", 0xd0}, {&(0x7f0000000540)="5c8c6a63c8525b214ff9c83b71c43290b9ac84ddfd05b1b30150e65ee883d2fe2c827f2c9ea004ac5f4d4aaa77118ecaeb85082a5cc9ead42a0aca771cc903d1ae8448aff1008e1d7caa0c5daf2cd3de70d8519f4b54b2fa97f7bef0820d300ce9e5e9cb97035f7167bffb75a79a9d7f2a467b660859dd8e506d2a0fec4d72d338c1ad13aea72e2b8550780cd165878e573f4adb212129476ba71089e7666777cefaaef6e92551b586f8670114cc0c5bebda4cfb7547a624008ca595ce5fa031960b46ed136b2de34091", 0xca}, {&(0x7f0000000240)="281a704694f0a5f37bab10bf78040547c9bc2676149b47150bb6", 0x1a}, {&(0x7f0000000340)="b115df2a5923322fbc80b2c0c9eae2e0bfa26b0884342ec425ac7a65048ae364d0e0e11335bc874434477407db94ddf28468dbb20c67ec37f33f12a7a810fdb3c4952d9fc19a3d27d012819c9505427210f7245a83c3e1db3eace58fad633ced3385720f6129dc1ef4e34bc30cf7c3cb31fdb30dd317f53dadc85cedada4896dcbb8a07ca896fa8447fe9be81a4c4aa173bd56943f708f91432710705eb82dcb84fa7ffd7d18110d9fae956e6e47014b09b676d9e4c87fb6bfac", 0xba}, {&(0x7f0000000280)="3404f7a35514df1dfde76a56ae81d412b89f52e96d186eba9619f4b613fdf0329d6aeb0677bb35dcdb8466583fe3dd02b4593fb8c676079fb7802d4e0f656c92775093ed5ec3d0eecda554b398bc35e9f4f2f5bc0bf88fa51a1e22b138acec2d456079d3d56e273b39743343174830e178fec8592e9a242bdfdeffe1", 0x7c}, {&(0x7f0000000640)="3635778ef9d856a92d461ebf43fd57cd600100a3625c5f933b55c23232d7c1402ac349351daba1fefadbe37954b48ccd364d0bd7fed12455d9bdb64782bc35a7e55cf18c07a3c1e59e8dc37a1aaacd0ea0aef46f", 0x54}, {&(0x7f00000006c0)="727bd51879b0e69e9f947a9a944cebcee55e2af698bca0f1fb4489c3f843a1c482ce2b9c59bd91ae238cebf20da9b8e24ab754a1d1560a00700c14", 0x3b}, {&(0x7f0000000700)="256244ec07e3d135eeb2e0467a779bc89107b5eee4dd955abf6dda7e820b95fbf2c52e09159d317906e612098804d24b8a2cfd96f6f6cb086f308fb3fe1f601dd4c52b47bcc7534a9dbe0deb6fec59f6d1d805eb91f56a1d277f52112dd2060ea2340e58d244bb2056837513220930647457b4947173cfa4d4e71564f6ae7c9441a112d0a45bb90759080e5a41bcb2b94286b8b76d847fb3e4978b2a0ca408d789b42533299f0825ce1a90571ab2dbb7e0e45a126002ea8ff7c4113cc34e75f4e255ce4d8ac4b6b92d52751e9d62b804f953fd0db8fce98c318333a5d7ecab8b714551a840063444", 0xe8}, {&(0x7f0000000800)="5e8076f77eb5b025acab4a913d0854bb1b50b7230a5cc6b661ad914e99b2f7ad149581f77b88a20bdbe78b2acfd1d7cd2d901beb591e2546267d7520bd6a2fcb93ac4e908f7af042471a233cdf0e7455590ad40d88c26310c616adb577c681adc3b8f5c2b531b4e3292f271e01cb72d0c68ac2d6c60e3f929b0485ac7d1b17b1f07c19d87dcad811eadc399cfa0334862a6d61c2f6da7cf76c159fc2de0a", 0x9e}], 0x9, 0x0, 0x0, 0x20000010}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000a00)="2cd3d58f36b75fd1c5d18b8678de46b0ef5fa85ce3206efffc0855e20c0a51040f3af160e456f94bfb46b352484e4b8c82156b4a07b411fab3771f41c514638c8e52cfeb2fc04d72adf7ee0c0a562d6f3f2d8bb95ae9d16f66ec695774c8a30b8ae363f2cd4e73b03a170cdcbec6cc4264432427acf967c1985c08044cabb7fb1de0f3613b106e716c47c82568d6280484711c1532c1ae65735457a5923154fdbe6ee374e0ce8e3201414b187dc66b0c1b6567e703c078368dc1f07bdde71876a1ea0c015d0cb3acb84a3d258a67cec42d", 0xd1}, {&(0x7f0000000b00)="df6beaf69634fb1115cb43f8e127870eb2a2e1153e0e2e3fad4c22d812ed62e1a8310f99f578ac15a76fa083594ca6c942ac10d17961efa62c4a96b6bcbdc93fad5d37b2e3f2a391941a135509c2a3637c39a4e4131e1285468161069881aec004b93d0eaff1f430e689ef5d5c2770255161bc1f55f433d2fa079b1c43fcd74f9f1358d99cba9bf6e4930a52a368cd94df280361c6819e450f", 0x99}, {&(0x7f0000000bc0)="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", 0xfe}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="160045e79062de6bc1ce6165ac69ae6f557b7a0bdc51c5aa62152d467985837a8c9128c89bafd69f5b3ede818ec704211c1c46f68711b207e2fb26559e3918f3a76a3b2c644de0b4f693db089c0f01ff95fc03731e0bd20b3c8a2825fbf4a022ec11e6cd19b0", 0x66}, {&(0x7f0000001d40)="c6cfc6cd2f3c7aa10e78b2b622e70f9e1aded4de3243b36279d20cbb3b413a092b67d418b02ae274df37b738d0d375b9148ff1d0a54b79bf0f5cbeef4cf731ee785913bf0b1e2928057488364ed60a7f365f3ed45d024184aececf8f8bfd05d4abb7afb7fd48fd41dfa8bcbf457d6fe46f4356d63ae9b73a4e6d748ede96f87b018b7da8036aa5835705c1731bf91d5d99677c3745acd12043ccc8", 0x9b}, {&(0x7f0000001e00)="d58d4d767a6f33f8c14f129e073e69", 0xf}, {&(0x7f0000001e40)="f7d2e7dc5f109695e2a71087bcf28054d0d2763a1123f2ebff0bf42d28b36485007cb702b0c85131ad1d1d6eb81f869e2ccd8724062ac91e0f8517c136ddf88f3ea12154b2087ea2a7a98134fcc175bdb59651df249655a8c48867d35a7b8e083691bb37987d830ea20b07a6", 0x6c}, {&(0x7f0000001ec0)="cb647d4cfdbc0cbce60dab8c1170702369a2dc6cb040", 0x16}], 0x9, &(0x7f0000002000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x84}}, {{&(0x7f0000002040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002340)=[{&(0x7f00000020c0)="29108b584e01b11d3572d50b65fef4f2afde18da3a17fbfc946ed25ff79ef6b2a261bbf7446ebcf3ddb921fc07f01fd90243e1be36b4f4b26e50e5d15d15e7125d261ea5f51f675fb183050d4728625d6f293a54426d60c21db07fa58722fc006513fe46cdc94bb02ede39cdda31172552bbc127efbcea5867cf73b12ad15b9606a861e399453818", 0x88}, {&(0x7f0000002180)="eac8f84065c95aa6904ce0fb1ea0188bf34c1225df31b2bb41e280ed8c84583448a4b6f57e830c2cf02aa7595635a22cb5ca012a8bd664080b77203f0ffa31ba1730cc681c6b8b6621c45459b79b9d12a643170985be8de8b1ea6926c8859cef29c368176fec33e1e68607c9ead4ea5cbb5f32e7fbc59975baabb8e5b5ffb75ebe3d887722b2c20d1f10470e7542bbb4c77f4c7ebc7487", 0x97}, {&(0x7f0000002240)="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", 0xfb}], 0x3, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r2, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r12}}}], 0xb0, 0x40800}}], 0x3, 0x840) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r13 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7f800, 0x49}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x90) 11:06:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:06:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000300)={[{@data_err_abort}]}) 11:06:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2525.096512] loop3: detected capacity change from 0 to 264192 [ 2525.100777] loop7: detected capacity change from 0 to 512 11:06:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4a03, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2525.118218] EXT4-fs (loop7): inodes count not valid: 16056352 vs 32 [ 2525.120300] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2525.121879] EXT4-fs (loop3): group descriptors corrupted! 11:06:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2525.137805] loop7: detected capacity change from 0 to 512 [ 2525.141543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.144752] loop3: detected capacity change from 0 to 264192 [ 2525.146794] EXT4-fs (loop7): inodes count not valid: 16056352 vs 32 [ 2525.147617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.155152] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2525.156748] EXT4-fs (loop3): group descriptors corrupted! 11:06:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf420, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2525.170838] loop6: detected capacity change from 0 to 4 [ 2525.175186] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2525.181948] loop6: detected capacity change from 0 to 4 [ 2525.187002] EXT4-fs (loop6): Can't read superblock on 2nd try 11:06:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2001f8004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2525.279987] loop6: detected capacity change from 0 to 4 [ 2525.290874] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2525.294413] loop7: detected capacity change from 0 to 512 [ 2525.301047] loop6: detected capacity change from 0 to 4 [ 2525.307731] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2525.311977] EXT4-fs (loop7): inodes count not valid: 16253216 vs 32 [ 2525.338979] loop7: detected capacity change from 0 to 512 [ 2525.352366] EXT4-fs (loop7): inodes count not valid: 16253216 vs 32 [ 2525.360617] loop3: detected capacity change from 0 to 264192 [ 2525.367150] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2525.367975] EXT4-fs (loop3): group descriptors corrupted! [ 2525.377711] loop3: detected capacity change from 0 to 264192 [ 2525.386093] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2525.386931] EXT4-fs (loop3): group descriptors corrupted! [ 2525.468306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.558403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2535.045132] Bluetooth: hci5: command 0x0406 tx timeout 11:06:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe703, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:06:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffe004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = accept(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) r3 = accept4(r2, &(0x7f0000000280), &(0x7f0000000140)=0x80, 0x81800) accept$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) write$bt_hci(r4, &(0x7f00000000c0)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x4, 0x3f, 0x8, "a75930777f36895ac1aac1fab34966a87ff8a2bfc048bed980173c4814a638"}}}, 0x27) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:06:55 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004a000}, 0x24044001) [ 2535.541620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2535.580226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2535.583004] loop6: detected capacity change from 0 to 4 [ 2535.590027] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2535.603716] loop7: detected capacity change from 0 to 512 [ 2535.617010] EXT4-fs (loop7): inodes count not valid: 16711456 vs 32 11:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2535.622918] loop3: detected capacity change from 0 to 264192 11:06:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2535.630467] loop7: detected capacity change from 0 to 512 [ 2535.637427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2535.645467] EXT4-fs (loop7): inodes count not valid: 16711456 vs 32 [ 2535.648270] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2535.649001] EXT4-fs (loop3): group descriptors corrupted! [ 2535.672329] loop3: detected capacity change from 0 to 264192 [ 2535.679965] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2535.680731] EXT4-fs (loop3): group descriptors corrupted! 11:06:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20feff004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:06:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:06:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xbfffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2535.778734] loop6: detected capacity change from 0 to 4 [ 2535.787113] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2535.790853] No source specified [ 2535.792971] loop6: detected capacity change from 0 to 4 [ 2535.796435] loop7: detected capacity change from 0 to 512 [ 2535.797609] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2535.798352] No source specified [ 2535.814599] EXT4-fs (loop7): inodes count not valid: 16776736 vs 32 11:06:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:06:56 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xfe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2535.836275] loop7: detected capacity change from 0 to 512 [ 2535.856859] EXT4-fs (loop7): inodes count not valid: 16776736 vs 32 [ 2535.870203] loop3: detected capacity change from 0 to 264192 [ 2535.873606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2535.879775] loop6: detected capacity change from 0 to 4 [ 2535.883945] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2535.885692] EXT4-fs (loop3): group descriptors corrupted! [ 2535.892994] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2535.905767] loop6: detected capacity change from 0 to 4 [ 2535.908871] loop3: detected capacity change from 0 to 264192 [ 2535.911009] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2535.925181] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2535.927160] EXT4-fs (loop3): group descriptors corrupted! 11:07:07 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004300000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:07:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:07 executing program 4: ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) 11:07:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x102, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x80000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2547.266720] loop6: detected capacity change from 0 to 4 [ 2547.272590] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2547.273899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2547.276886] No source specified [ 2547.277723] No source specified [ 2547.282349] loop7: detected capacity change from 0 to 512 [ 2547.283767] loop6: detected capacity change from 0 to 4 [ 2547.291590] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2547.292541] EXT4-fs (loop7): bad geometry: block count 67 exceeds size of device (64 blocks) [ 2547.301819] loop3: detected capacity change from 0 to 264192 [ 2547.308422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2547.312565] loop7: detected capacity change from 0 to 512 11:07:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2547.328338] EXT4-fs (loop7): bad geometry: block count 67 exceeds size of device (64 blocks) [ 2547.333754] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2547.335349] EXT4-fs (loop3): group descriptors corrupted! [ 2547.337898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x112, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2547.357706] loop3: detected capacity change from 0 to 264192 [ 2547.369870] No source specified [ 2547.373042] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2547.374804] EXT4-fs (loop3): group descriptors corrupted! [ 2547.384946] No source specified 11:07:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf0ffff, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2547.387011] loop6: detected capacity change from 0 to 4 [ 2547.391632] EXT4-fs (loop6): Can't read superblock on 2nd try 11:07:07 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003fff800000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x300, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2547.452780] loop6: detected capacity change from 0 to 4 [ 2547.462648] EXT4-fs (loop6): Can't read superblock on 2nd try 11:07:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2547.481315] loop7: detected capacity change from 0 to 512 [ 2547.483659] loop6: detected capacity change from 0 to 4 [ 2547.490329] EXT4-fs (loop7): bad geometry: block count 248 exceeds size of device (64 blocks) [ 2547.491543] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2547.504885] loop7: detected capacity change from 0 to 512 [ 2547.508975] EXT4-fs (loop7): bad geometry: block count 248 exceeds size of device (64 blocks) [ 2547.526681] No source specified [ 2547.528157] No source specified [ 2547.544647] loop3: detected capacity change from 0 to 264192 [ 2547.558303] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2547.559074] EXT4-fs (loop3): group descriptors corrupted! [ 2547.572262] loop3: detected capacity change from 0 to 264192 [ 2547.574472] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2547.575323] EXT4-fs (loop3): group descriptors corrupted! [ 2547.632872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffffe00000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4f9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x7, [{}, {}, {}, {}, {0x0, 0x0}], 0x40, "6123a1d6c2de6d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001440)={r1, 0x0, "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", "36a66b479f04bf8de6e4eb32a4d3544889c045261a656cf81359a88ba064f2ce3965fbd6bdb715972d8e708f284e670fba1ccc359a75d9d1e34888f59772f00c15a98fb883516bd2208cc8375f0933f60154361545b1e47293da8b569b172da31cbf0f3d2094c298f544da57bda801c8f75e9144b816d993b023b67444de9a1fba9a1286e1ce74f9a4ca7ce900a22fca590dfcdcdd82094c4aeb5e239d1158fd1c2268a43ec8c081484ac2ec3390056bde3dcbf62b122f2b9a0c04efbf7bf63eb4f0899fb72333a926e42dcf1a2d9589b547fca08073329480d592ad3c526106316787ef6d1469b6c30b1fd2a49686ee8cbbe14a5538f242fa5fa520f84c90ad57478a0f09ac57a0c8c6f0cc9ec09bd808fd5eb1c6713cb1461c63848504724561820b3da3af6577a7d798dc895d39d8473c8b157e4e70c549f67ca912f2556bc645fbfeaea5b4ca6757f23e56ba13c7cff316531bbe8aefeb9c28d8cad927085fff2b666ec802fba17a9c2148b10ea2c9aa704621536870378192c01acbfd6e90acb5a7a3407ff14c75d0c0cbf87f25fab061087626a1cbabaa12d9bc69425e9b9889f2e8dbead12b3f9dc45e46912fa8b559691ae655806acd3aeb52bc0898d32a851e9cb92042bcf6d7490030225c292cc08187f5380b9cb6c24aef741825bcc51735039f1eda2bd06b20c9997c15a7c2eca3624af666a7884d944ccd00479676e17f995584aa5bda036cc88208906b2083b469c8012818be64aa40e3894e03ae4f8e037a1d5699cd904b7d0fa4bce08ccc336c3b9464458e4ee46c27cd68eb1ef2af8c839a3a6f84349953094488536e5947515a82f96980b67f7a001c496e3a3ab657da4c71d4d7cecdac1e22b0c9a52545ccdbc115554a053d853a804808c5812efd37ea95ffa811bb0f82dab88a5ce1501c7c12623ad46a6833bc0594cf8969e559e2f9c25873e272e2f06043b3d1adcea3cc4e7dacb69638dc8be9aeefb7f279fddd7e4bc44425f7935385fff7646e3d35754cd165736a1c279a4fddf73bb2a14ffbeedcd5189fc3ed1f3e7132b9a1f4b70cec69c589f409312297993810662a6b23cc3fb0697480255138de84616d0d92c9801fb65fc9c2e8bec1bd80f4bf3ad79d71280c458d7ed7d66c3e96ff4fcf02360f9e2c2b7bcd9ddf16d524687c3a48d6f158706460f37af2155924cd6847e77ec6959a14a52de5e3b69ccfdd7e63f3a9fb4ac0594d553f16d92447ccec0027948b928e375c53d11e648333d5e2c9f5315269edee268f9bbf13c78493da007c6efc348b7b5123ad64eda1fd865a90f5d1477aba2c13c1234684d488e6dc84a3e4d1e45e814cac4c0af9bf42df381c97a6c8eff849d7dee9ea2eb35860fe14cd654eb6cd57053fc391c216acad0b117eb567984635343614a6c0498d584329c8f0c79987e8f15c2d2f7eda0abcab8ad0a1de18a8624e524fc3523f4f92798110c1a3360dea55c63d2dea0b080a8009c6b30b3d158da8c9f30a1beae94075473010a80edecf907df3effb2904ad34526f21103a6e984c44671af5bd98100bdf843f3c99e0bdf8acc07a39abd0054d029c6c29216f9d816eb0ed7421bc5291e72cf5d1140825048e38c964ddd3965bf07b45eb245f1f82da6376db4510ff084e04899697f73cd292b66828fee67642678417a86cb9c014a42df2ec401057ceaceb78cbb0fb71ab8dc23f90f20fc39c345eef55a5bc2d4ef8cb6ebac264682504f859bc1d39fd865d1969333678da8efc4bb7fb4d5ede1214c19e494d728dfd288e9118a16db19e67f2193b90d3f63d9d0bc1b2200d695ad44c8d7331acb78b4f571e1f8bce3e9b2add397141f7420c775e8f0d687a32e2e81ac32de1707747b67f138470b080aad06443e712269ce2c5431eec7e277e937d9d31612ee2a6a2ec5f5c8ad5c462a17d67feb32ecdff3a7702507fec02543e1efef958be0d3e13dfcb1d8bdf80395f6a2d71abf4167c8d69859d1ede5a96a3dc64a508fadd23665d268ae31850dbec20b9794cffad8c3a5125f6e206fc582f4c85ccc24ccb4ebe2ae54aac43815eedf988e38ebb1e8ebac255e6c28b0a48c6eba49b64d7befbc4c4c9ea82e3dd188120172ff1ed9746311a354ac2a90b5f8c211c2c31b7ca53da0a6b48eb86c8af02c079ae4047d4cd1ef3fad50bd2cd8072c1ad76eec476b07ae182dda611a15915a7de464db610e4d422f51f0d17d4a61d85150beccaa1f656d9dcac46dac07f71a67adcd9d98e7b89c66ce6accba6e4b7be77258d756b6ac6aab50ab7736618dac1ac1b0c6cea8e30738e3e74323812b4f141b93e03c046804b39a6868cd7581b7c4be90461c88e48da92d65aa16d29035374485c94358bc4bd792eacfdaeea1497cc5fce0ca81276d67e36c452b09c1f533bae36e410b86cbe91618fc2c4f505f0c7bf78935218505b960f6b1be003cd9ee7fc054b0eb076e6b726facbb00fd7feb40879386e1aeb3f09b40fe1025ff2e496f27402eda09536a4cce2b9e5def1438a452a172e0dbb5f2114b4a547dc542fb365ef509fa279096bc5860643780e34013e69fd8712e4d9d1d882623eef52e1159908b21e35e8cc7cb13d47145b0436ef484265a430f2a290d8f9a5b9d2933344c3294c678ca417578487197d444baad8b3b5606ba908d16b682ac4ddc1ed274e204db82376dd8891adc94271d43d922ab2fb3545ccbddedb460f01beba41354079cb74d81045c7ed17470b2217f968965c5b8231175007dc66acd37b4168b1c92e8eb1b34bffd632080c88b5511a8652efdc03e34b2f6f0f104e9217031304e9207d85d165f71b7821eeec54406dfa0f92f11bc89c19fb84d605546154eb3ba3bc03575cd57812c9edcc5fbdef80ab5de2f2228f27f2ba2c86d2df12152b760f4d91f666ed37a1a9ce57360435d6dc1341210ddf5a64ceef2d51904f0a64b2d0651527f94bd6adc353bb5f7bbf0f6a100786a0f8504f1e173e5b49a6a17d216320000db97f3a5dea7c5ec155bb930ce1850bfd19857f9eec62565599ef06f921c6772c10e68a8aaf1279cb1ef368cc6d9bd65d9cf899d3a89fc49ee98f59529e177c9d2b9ba59a8b2120cf813060bb1219535af062d7b1ae99e3eef0d9d6718e23d1c7edf7c1061193da12ec560215cdd59a7940e4bf8d14a63b459b69435b4090f29c4a64976815969d25ea327f5feded8246141a3f89f2d3c25c155893e1436b2727a78c5a932a31d3b43f76ebb79b72c9ac69d2abf7498e3f7cfcdc43bc5a94c702dafbe6831cbc4997d41705f23587e0e30eb648cdb015ea3739d1d3bed9188d30bd55411cf5e9f9019f260818bb4a9e8441e58bdf62d235bebf6da4a65c850973418e86f4eafaf8412798e407668d382e1a74df5c719f21a69ea9eb4672d0d5aaa0938eeb6372699acda82407388ac4fe3ef5bf5b623175b7bb71d47e65764ef49384c41584e5e6d9f9edc6489be07c21cd1e3e367284c7d9a21463a57f3c66bbe694792e3535b260323c83ae2444843d70f5c92d6e3c58b7d3d97d51351a8dbeef1d6c503adde9ad19d8fb6d0e3bc53769084372af25985be02b68bfd9b8625a5759e22ca139dfe4740fc0293d9fee593ef89436fad6044ff5a728b4e629237cf868a8de005617f4ce176395ab3797ab4e0a6af6946a4e609ae81cee13b30db24806d2c1ef9f013f77a6cce351ca3456cdd751c5f2fb3e5b568b61acd5bea1fb59baf854cc2e32f2ae401901884fa7989b3349b37abcd90a56530ff355f7839e1b5115882ac9d526db7586fe8894deb50404627e19b503b8a5325af56d4db1be4a14a383af1e91f077cbdbe585ec174745e2a2dc53e02f8d7b760f29699bee35a1077b28b3d1461c953621452a8a3a7f41663366918c8a4c503836a5759b709423fb807840e70877aa3ca6ebed0b7829b688f114f0fe7bd33d732b9a848bd8f1d30fa2ce94d0f4198c40e77bd92c1353bc2e0b90c68427cfbe4a804e4d0f66db5000ffa6cad4e8f0a5f8bcf58980a26460b7f5bd843b9bb35e1173a4269ed4e10fe573808d319039931a4809dc95fa21cd888fc595b2fb17970a880f4f79f2dbe3276b7bf6c5af7ed14143fd1e9f6b0bcd05b141e30cab2ecff1fc74955051829481b6656fc354ae225c45457b36db9254641fc59e15000ff7af345f1615c59c0b4520586812b7a3dfae4b153f0bd2f3a3d5f40556e4dd515e1b71376b8f5f58d5cbd78dd64b2157265f7e75b6a1ca08aa8064edc8d577e5c5807c94160034da13d05197d9fa2758f474406e2f399aae8ae357e2aab59fc3e87eba0b623bff0bae7b9e75fad6d875c003bbc77b01ada50f114515535ba9972eefe666b73fe8f9e8365c40c678e45a0b42f9a492d14cd7d11a2e6de2238bbcca234af210173e9281cd07309b6ee9b58b5a7f81dfebd53de9525722a5258d7065fcda21c23ff0527bafb531ff749770265734c5af3dd230d4775e6552fb14a525f9f62926421b637376e3b197fa0179453387a8ab2dfba08cff784bd0be24ee963e4b58f988e9249827250e64a05478b5c392852a4b6b92735c0b1253a66d0d2e415a20d4e0062bad9c2ac13488d68c91781cfa871328fb8c1f7f514aaf5678aa3553d36d3a3fe65abf098fb69efb535a4c7e0429f4b539de754e6a4cdcb3cc8a4f69adbce1f8e5c32d6706013ba6168ec3643ff7798245ee5157f156296453ebd02c246369374ead8b3af9e699773fcd503410f0f1bf29601b9deecd50c5349341e76e4002666fd251926e55ea9a36f8700f37fd8840f51b72e1f72f17412628b7f4030cb8dda94c8c20ebf29a3e19b04c77b34ed592ad80863f7bb5274355bba7a681d415192231d31d29393aebba9ee2ef80a9c9a67c1a693467ed33ad5f8bb9d7ad467f0f0a85ff7f057c60f7b809de4828eef4aab6ac28ecbac060b7eb823dd3e1fe1c264fbaded802d803243e4f713e79c03fecd4305fdd0ecedfb7a57d8eecb24ad895bc7d4385ef159e5d78d5ef7acf0948cc944a7985a7a4b7adf2028eab951aee90c07fffcdb67c0380927bd665a9b98ed59bbab733bdeadf8d0431fffbcfcf57d25810c5de2e3d78808ab36945e3c62d71e1cf127903ce5e7e3dbf4ae44b1025cbd2f9b1b276e8f4a9baa9d4af16a8dbb1f05329343c24f5ae82b4b27c7173fd94ef70b9e8dbce078c012ae47e6f05b95decbb92a173479c326c0996b22ef336cf7ae3ddc705f49a814e97b44c385221eceb3d6041004cc4f7b6dee8d40097e85c28492299cfd5d6e839b90a3ab6991cbdf95ddc22252a09d05db5e3000a67de4626656159eb2e57d0de42b703821fd04dfbc618432afdeca84a38459b65bcdca25f4b14107409cf59fdd8053797e0457822bbf58e55ad3a8df4b620487458f26c65"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000140)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x7, 0x5, 0x8000, 0x9}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x440) ftruncate(r2, 0xffffffffffffff01) fgetxattr(r2, &(0x7f0000000080)=@random={'os2.', 'nl80211\x00'}, &(0x7f00000000c0)=""/104, 0x68) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r3], 0x36) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) 11:07:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:07:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x68, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e88cb07174cd5f2a86efc476c05a5c42832201598d4fe6c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000008}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x120, r5, 0x16d83335761f5a6e, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "1bc1bf7662fd069db96184ee6bf81d4eaf49adaf0ea2538b3dd2b66d53a724a551ba303797061133b638082f4e76ab"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_MATCH={0xbf, 0x5b, "a3bddc5bf83c968ee78475674f759af14e645306e544c10742b8578aa11345d04568b2c9841c970316ac24a6428b94bf5ccda9ffc8c6adc0afd59ad8024bfab47a0df1fe722c7221e959b380bbd42c520e2e4e80c5b913a75830e502b9e76c319a8f90e9bdbb309ffaac2f5c91db9a91ea0cc83b598a212538ab8d0150e12b44b66e25a6034cc30079b7e6753ef4a6c7f801b340c31b2f5e2d83374b328ccf21fb08b9edaf8fb6ebb23a9ee4187c5fec2b24427cd39f14c1cc0d54"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x14}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008011) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000c56cc9b9df0a6fc80cd86900", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2556.978431] loop3: detected capacity change from 0 to 264192 [ 2556.986989] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2556.987747] EXT4-fs (loop3): group descriptors corrupted! [ 2556.989502] loop6: detected capacity change from 0 to 4 [ 2556.994666] loop7: detected capacity change from 0 to 512 [ 2556.996800] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2556.999739] loop3: detected capacity change from 0 to 264192 [ 2557.005645] No source specified [ 2557.008259] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2557.008979] EXT4-fs (loop3): group descriptors corrupted! [ 2557.015761] EXT4-fs (loop7): bad geometry: block count 254 exceeds size of device (64 blocks) [ 2557.020612] No source specified [ 2557.021315] loop6: detected capacity change from 0 to 4 11:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2557.030255] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2557.044192] loop7: detected capacity change from 0 to 512 [ 2557.055776] EXT4-fs (loop7): bad geometry: block count 254 exceeds size of device (64 blocks) [ 2557.056640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2557.063906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2557.074504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x504, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2557.120626] loop3: detected capacity change from 0 to 264192 11:07:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2557.133352] loop6: detected capacity change from 0 to 4 [ 2557.139560] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2557.141168] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2557.142864] EXT4-fs (loop3): group descriptors corrupted! 11:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2557.162665] loop6: detected capacity change from 0 to 4 [ 2557.165995] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2557.182774] No source specified [ 2557.188566] No source specified 11:07:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x505, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2557.232666] loop7: detected capacity change from 0 to 512 11:07:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2557.257360] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2557.258737] EXT4-fs (loop7): group descriptors corrupted! [ 2557.277155] loop7: detected capacity change from 0 to 512 [ 2557.289695] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2557.291105] EXT4-fs (loop7): group descriptors corrupted! 11:07:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2557.305295] loop6: detected capacity change from 0 to 4 [ 2557.310531] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2557.333698] No source specified [ 2557.340045] loop6: detected capacity change from 0 to 4 11:07:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2557.343994] No source specified [ 2557.359864] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2557.389344] loop3: detected capacity change from 0 to 264192 [ 2557.396479] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2557.396496] EXT4-fs (loop3): group descriptors corrupted! [ 2557.400288] loop3: detected capacity change from 0 to 264192 [ 2557.403330] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2557.403345] EXT4-fs (loop3): group descriptors corrupted! [ 2557.429019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24010000", @ANYRES16=r6, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x40040) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r6], 0x36) 11:07:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200002004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:07:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x506, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) [ 2566.011680] loop7: detected capacity change from 0 to 512 [ 2566.020237] EXT4-fs (loop7): inodes count not valid: 131104 vs 32 [ 2566.022887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2566.033787] loop7: detected capacity change from 0 to 512 [ 2566.034607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2566.038988] No source specified [ 2566.039457] EXT4-fs (loop7): inodes count not valid: 131104 vs 32 [ 2566.051496] No source specified [ 2566.052622] loop3: detected capacity change from 0 to 264192 [ 2566.070977] loop6: detected capacity change from 0 to 4 11:07:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200003004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2566.078121] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2566.078858] EXT4-fs (loop3): group descriptors corrupted! [ 2566.084725] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2566.092978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2566.095735] loop3: detected capacity change from 0 to 264192 [ 2566.103754] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2566.104526] EXT4-fs (loop3): group descriptors corrupted! [ 2566.109024] loop7: detected capacity change from 0 to 512 11:07:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2566.116801] EXT4-fs (loop7): inodes count not valid: 196640 vs 32 [ 2566.123387] loop7: detected capacity change from 0 to 512 [ 2566.127426] EXT4-fs (loop7): inodes count not valid: 196640 vs 32 [ 2566.134510] loop6: detected capacity change from 0 to 4 [ 2566.149640] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2566.168732] No source specified [ 2566.170543] No source specified [ 2566.411791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200004004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:35 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000000)=ANY=[], 0x36) 11:07:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:07:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x507, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x8000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x62}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x47}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x34}}, 0x40000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="5000000008fe06c538019ddb08"], 0x36) [ 2574.806998] loop3: detected capacity change from 0 to 264192 [ 2574.817240] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2574.819024] EXT4-fs (loop3): group descriptors corrupted! [ 2574.835481] No source specified [ 2574.839044] No source specified [ 2574.841520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2574.845695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2574.849803] loop3: detected capacity change from 0 to 264192 11:07:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xb000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2574.877484] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2574.878879] EXT4-fs (loop3): group descriptors corrupted! [ 2574.880273] loop7: detected capacity change from 0 to 512 [ 2574.893841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2574.900963] No source specified [ 2574.902827] EXT4-fs (loop7): inodes count not valid: 262176 vs 32 [ 2574.902975] No source specified [ 2574.906978] loop6: detected capacity change from 0 to 4 [ 2574.921318] loop7: detected capacity change from 0 to 512 [ 2574.924294] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2574.932824] EXT4-fs (loop7): inodes count not valid: 262176 vs 32 11:07:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2574.979562] loop6: detected capacity change from 0 to 4 [ 2574.993890] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2575.000695] No source specified [ 2575.006459] No source specified 11:07:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200005004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2575.032593] loop3: detected capacity change from 0 to 264192 11:07:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2575.051257] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2575.052766] EXT4-fs (loop3): group descriptors corrupted! 11:07:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x508, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2575.083541] loop3: detected capacity change from 0 to 264192 11:07:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2575.093496] loop7: detected capacity change from 0 to 512 [ 2575.098501] EXT4-fs (loop7): inodes count not valid: 327712 vs 32 [ 2575.104372] loop7: detected capacity change from 0 to 512 [ 2575.107920] EXT4-fs (loop7): inodes count not valid: 327712 vs 32 [ 2575.110428] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2575.111329] EXT4-fs (loop3): group descriptors corrupted! [ 2575.143982] No source specified [ 2575.144881] No source specified [ 2575.175588] loop6: detected capacity change from 0 to 4 [ 2575.196768] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2575.210899] loop6: detected capacity change from 0 to 4 [ 2575.212930] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2575.217930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x509, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000008fe06c5380108"], 0x36) 11:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xfffffffffffffffd}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r4 = dup2(r1, r2) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x30c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1b64523d}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc7c}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x8, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x42}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200001d0}, 0x8002) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000440)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd9}, @device_b, @device_b, @initial, {0x6, 0x2}}, @ver_80211n={0x0, 0x91, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1110, 0x12, @random=0x1ff, @val={0x1, 0x8, [{0x1}, {0x5, 0x1}, {0xb}, {0x6c, 0x1}, {0x16}, {0x1b}, {0x5}, {0x6c}]}, @val={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0xfffffffffffffc01, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x401, 0xfc}}, [{0xdd, 0xfb, "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"}, {0xdd, 0xcb, "712a95a85a06e49dd8f9d87a430bc7ea2bdda708723fc1990d15ff3e2cd7f8e9d09281a12d1f96f771d61b8b5c85074f5de6f402aa0a356eb6be816bc095558acf64ac3fff344c285209f6c030400a15d113d95c1dc89a976b995fe7b177ed0a0220719d0eed2c7d234490a78cc06c4c9a5eb709d185f7162ff620d9578e5e00b02613beaf9989be13e5a673aae0240f64cfd72caa1bfe0d33b6e56c3de748aa1a04f014cd03f671bfdcbf8420d5a8d3180ac4523ad98a791e19d5d7530791d4c1ce1f4a5e5f58146afd8f"}]}, 0x212) 11:07:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:44 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200006004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20100000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2584.497899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.503989] loop3: detected capacity change from 0 to 264192 11:07:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x24000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2584.515905] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2584.516680] EXT4-fs (loop3): group descriptors corrupted! [ 2584.523839] loop3: detected capacity change from 0 to 264192 [ 2584.529002] loop7: detected capacity change from 0 to 512 [ 2584.536704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.538862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.539935] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2584.541155] EXT4-fs (loop3): group descriptors corrupted! [ 2584.543466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.547548] EXT4-fs (loop7): inodes count not valid: 393248 vs 32 [ 2584.562566] loop6: detected capacity change from 0 to 4 [ 2584.563468] loop7: detected capacity change from 0 to 512 [ 2584.564037] No source specified [ 2584.568681] No source specified [ 2584.571430] EXT4-fs (loop7): inodes count not valid: 393248 vs 32 [ 2584.580282] EXT4-fs (loop6): Can't read superblock on 2nd try 11:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4a030000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x43000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2584.642645] loop6: detected capacity change from 0 to 4 [ 2584.645500] No source specified [ 2584.647327] No source specified [ 2584.654202] EXT4-fs (loop6): Can't read superblock on 2nd try 11:07:44 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200007004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x60000000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x45000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2584.702992] loop3: detected capacity change from 0 to 264192 [ 2584.717390] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2584.719035] EXT4-fs (loop3): group descriptors corrupted! 11:07:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x742, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2584.729456] loop7: detected capacity change from 0 to 512 [ 2584.732115] EXT4-fs (loop7): inodes count not valid: 458784 vs 32 [ 2584.739805] loop7: detected capacity change from 0 to 512 [ 2584.742996] loop3: detected capacity change from 0 to 264192 [ 2584.743427] No source specified [ 2584.744778] EXT4-fs (loop7): inodes count not valid: 458784 vs 32 [ 2584.746751] No source specified [ 2584.757157] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2584.758716] EXT4-fs (loop3): group descriptors corrupted! 11:07:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2584.869781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.871106] loop6: detected capacity change from 0 to 4 [ 2584.871689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2584.879340] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2584.901238] loop6: detected capacity change from 0 to 4 [ 2584.904933] EXT4-fs (loop6): Can't read superblock on 2nd try 11:07:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r4, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:07:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200008004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa00, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 11:07:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9effffff, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2595.507611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:07:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockopt(r1, 0x9, 0x800, &(0x7f0000000800)=""/203, &(0x7f00000002c0)=0xcb) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x1, 'macvlan1\x00', {}, 0x9}) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x3}, {0x1f}, 0xe0, 0x0, 0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)="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", 0x1a5, 0x0, &(0x7f0000000600)={0x2, 0x1a3, {0x0, 0xc, 0xf9, "65b6f103ec7c146159077eaddff44f549d30e58774977dd98a5e343a88ab2d2cbe0cfe972cf4de0c0b2417e9b324406ff3e24897a5af4132b012fa6dd24b474f480dfa38a720d38c513ccd6968efacb8ce8e87cb335e9d1ba9b39328d2fb6339be723603fb7a2a42123765f5f83a426ebe84f9dfa8b389f298cc06d3b9b99b1997a4fb4df56a9f1e02ca22378eca190917fd6079354bdb0adf7365e77085ba974e1acc722c2fe03226547edeb0a2043fc1213886e33348fb2c20bf9c62b11f98486b8ea0af1de19b3947646fa837a1aba283847b46c4b729056a0affa55ef0585ca02e37aef98227e7b53de32d6c6033e8d868a244debd8d3d", 0x9d, "6e26f3d737f50383bd968117c5f32a0e76a66b23220c7a706dd3c705becfe86a98957e3ab78911287c946d7db06ba06dc66ae80ba62e30896b7f6278dfcb324e367b969c6772e2ab98646564548005ddd74e9dae8cb6451e50cbec77d02829276ec60f7b43e6ad628e06111a4b68a1a60ca5b31d50afa68a3088d1bbce0491a6c008275be9df8c67d5d5f16040f768647e61bd4be268a16b637bcb51e6"}, 0x20, "b54dd05f2ed7e7728c8799f3f9b2e5e6b3de59a5fa5328b0509add18bb4c14c5"}, 0x1cf}) [ 2595.540038] loop1: detected capacity change from 0 to 264192 [ 2595.541294] No source specified [ 2595.543793] No source specified [ 2595.553573] loop3: detected capacity change from 0 to 264192 [ 2595.557827] loop7: detected capacity change from 0 to 512 [ 2595.566328] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2595.567080] EXT4-fs (loop3): group descriptors corrupted! [ 2595.567455] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2595.567514] EXT4-fs (loop1): group descriptors corrupted! [ 2595.573528] EXT4-fs (loop7): inodes count not valid: 524320 vs 32 [ 2595.581494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2595.582969] loop6: detected capacity change from 0 to 4 [ 2595.584558] loop3: detected capacity change from 0 to 264192 [ 2595.590386] EXT4-fs (loop6): Can't read superblock on 2nd try [ 2595.591549] loop7: detected capacity change from 0 to 512 [ 2595.594355] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2595.595193] EXT4-fs (loop3): group descriptors corrupted! [ 2595.602501] EXT4-fs (loop7): inodes count not valid: 524320 vs 32 [ 2595.613835] loop6: detected capacity change from 0 to 4 [ 2595.620352] EXT4-fs (loop6): Can't read superblock on 2nd try 11:07:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1500, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf4200000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:07:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe7030000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:07:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200009004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:07:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000100)) (fail_nth: 1) [ 2595.746921] loop3: detected capacity change from 0 to 264192 [ 2595.775410] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2595.776926] EXT4-fs (loop3): group descriptors corrupted! [ 2595.794781] loop3: detected capacity change from 0 to 264192 [ 2595.807733] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2595.809312] EXT4-fs (loop3): group descriptors corrupted! [ 2595.824524] loop7: detected capacity change from 0 to 512 [ 2595.834356] FAULT_INJECTION: forcing a failure. [ 2595.834356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2595.836351] CPU: 1 UID: 0 PID: 20370 Comm: syz-executor.1 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2595.836386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2595.836401] Call Trace: [ 2595.836410] [ 2595.836420] dump_stack_lvl+0xfa/0x120 [ 2595.836471] should_fail_ex+0x4d7/0x5e0 [ 2595.836517] _copy_from_user+0x30/0xd0 [ 2595.836562] do_sock_getsockopt+0x37c/0x430 [ 2595.836596] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2595.836625] ? lock_release+0xc8/0x290 [ 2595.836672] __sys_getsockopt+0x125/0x1b0 [ 2595.836723] __x64_sys_getsockopt+0xbe/0x160 [ 2595.836764] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2595.836809] do_syscall_64+0xbf/0x360 [ 2595.836838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2595.836864] RIP: 0033:0x7f22c1565b19 [ 2595.836884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2595.836909] RSP: 002b:00007f22beadb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2595.836935] RAX: ffffffffffffffda RBX: 00007f22c1678f60 RCX: 00007f22c1565b19 [ 2595.836953] RDX: 0000000000000002 RSI: 0000000000000011 RDI: 0000000000000004 [ 2595.836968] RBP: 00007f22beadb1d0 R08: 0000000020000100 R09: 0000000000000000 [ 2595.836984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2595.837000] R13: 00007ffd65039c7f R14: 00007f22beadb300 R15: 0000000000022000 [ 2595.837037] [ 2595.837724] loop6: detected capacity change from 0 to 4 [ 2595.844360] EXT4-fs (loop7): inodes count not valid: 589856 vs 32 [ 2595.877439] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2595.903877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2595.921329] loop7: detected capacity change from 0 to 512 [ 2595.936010] EXT4-fs (loop7): inodes count not valid: 589856 vs 32 [ 2595.952542] loop6: detected capacity change from 0 to 4 [ 2595.959996] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 11:08:07 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000a004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1700, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000100)) (fail_nth: 2) 11:08:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x81, 0x6, 0x9, 0x0, 0x5, 0x10002, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x48ff1a6d, 0x7}, 0x1, 0x3, 0x100, 0x7, 0x7fffffff, 0x3f, 0x1, 0x0, 0x6c2, 0x0, 0xb92b}, 0x0, 0x6, r2, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r3], 0x36) 11:08:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf6ffffff, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2607.661827] FAULT_INJECTION: forcing a failure. [ 2607.661827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2607.663630] CPU: 1 UID: 0 PID: 20388 Comm: syz-executor.1 Not tainted 6.16.0-next-20250807 #1 PREEMPT(voluntary) [ 2607.663661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.663674] Call Trace: [ 2607.663682] [ 2607.663692] dump_stack_lvl+0xfa/0x120 [ 2607.663739] should_fail_ex+0x4d7/0x5e0 [ 2607.663781] _copy_to_user+0x32/0xd0 [ 2607.663823] simple_read_from_buffer+0xe0/0x180 [ 2607.663858] proc_fail_nth_read+0x18a/0x240 [ 2607.663897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2607.663935] ? security_file_permission+0x22/0x90 [ 2607.663968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2607.664005] vfs_read+0x1eb/0xc70 [ 2607.664047] ? __pfx_vfs_read+0x10/0x10 [ 2607.664090] ? lock_release+0xc8/0x290 [ 2607.664120] ? __fget_files+0x20d/0x3b0 [ 2607.664167] ksys_read+0x121/0x240 [ 2607.664201] ? __pfx_ksys_read+0x10/0x10 [ 2607.664246] do_syscall_64+0xbf/0x360 [ 2607.664273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2607.664297] RIP: 0033:0x7f22c151869c [ 2607.664314] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2607.664336] RSP: 002b:00007f22beadb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2607.664358] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f22c151869c [ 2607.664374] RDX: 000000000000000f RSI: 00007f22beadb1e0 RDI: 0000000000000003 [ 2607.664388] RBP: 00007f22beadb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.664403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2607.664417] R13: 00007ffd65039c7f R14: 00007f22beadb300 R15: 0000000000022000 [ 2607.664451] [ 2607.668430] loop7: detected capacity change from 0 to 512 [ 2607.670185] loop3: detected capacity change from 0 to 264192 [ 2607.686844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2607.702479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2607.706505] EXT4-fs (loop7): inodes count not valid: 655392 vs 32 [ 2607.725209] loop7: detected capacity change from 0 to 512 [ 2607.739497] EXT4-fs (loop7): inodes count not valid: 655392 vs 32 11:08:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xfcffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2607.761182] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2607.762677] EXT4-fs (loop3): group descriptors corrupted! 11:08:08 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf9fdffff, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000100)) [ 2607.784450] loop3: detected capacity change from 0 to 264192 [ 2607.800501] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2607.801864] EXT4-fs (loop3): group descriptors corrupted! 11:08:08 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000b004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2607.813014] loop6: detected capacity change from 0 to 4 [ 2607.830964] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2607.900908] loop7: detected capacity change from 0 to 512 11:08:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffff0700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2607.914637] EXT4-fs (loop7): inodes count not valid: 720928 vs 32 11:08:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x6, 0x0, &(0x7f0000000100)) 11:08:08 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdf9, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xfffff000, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:08 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000c004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2608.018047] loop3: detected capacity change from 0 to 264192 [ 2608.034309] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2608.035668] EXT4-fs (loop3): group descriptors corrupted! 11:08:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1800, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2608.072024] loop3: detected capacity change from 0 to 264192 [ 2608.089038] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2608.090443] EXT4-fs (loop3): group descriptors corrupted! 11:08:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5c}}, './file0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "bf5b3779f824df2969a8a69d3e34c874"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000001) [ 2608.123817] loop7: detected capacity change from 0 to 512 [ 2608.144384] EXT4-fs (loop7): inodes count not valid: 786464 vs 32 11:08:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f0000000100)) [ 2608.163946] loop7: detected capacity change from 0 to 512 11:08:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) [ 2608.182955] EXT4-fs (loop7): inodes count not valid: 786464 vs 32 [ 2608.236120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2608.279929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2608.302562] loop6: detected capacity change from 0 to 4 [ 2608.306507] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2608.338403] loop6: detected capacity change from 0 to 4 [ 2608.340834] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2608.556461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2616.965241] Bluetooth: hci1: command 0x0406 tx timeout [ 2616.967989] Bluetooth: hci0: command 0x0406 tx timeout 11:08:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffff000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x28200) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 11:08:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:08:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000d004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:19 executing program 1: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000100)) 11:08:19 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2fe6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xffffff8c, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2619.479901] loop3: detected capacity change from 0 to 264192 [ 2619.483766] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2619.484825] EXT4-fs (loop3): group descriptors corrupted! [ 2619.490702] loop3: detected capacity change from 0 to 264192 [ 2619.494355] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2619.495298] EXT4-fs (loop3): group descriptors corrupted! 11:08:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2619.572128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2619.572388] loop7: detected capacity change from 0 to 512 [ 2619.592682] EXT4-fs (loop7): inodes count not valid: 852000 vs 32 [ 2619.594532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:08:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) [ 2619.598908] loop3: detected capacity change from 0 to 264192 [ 2619.622609] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2619.623633] EXT4-fs (loop3): group descriptors corrupted! [ 2619.623646] loop7: detected capacity change from 0 to 512 11:08:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x10000, 0x20100) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) connect(r2, &(0x7f00000000c0)=@hci={0x1f, 0x1, 0x3}, 0x80) r3 = dup(r1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f0000000080)) getpeername(r0, &(0x7f0000000140)=@ieee802154, &(0x7f00000001c0)=0x80) [ 2619.631857] EXT4-fs (loop7): inodes count not valid: 852000 vs 32 [ 2619.714547] loop6: detected capacity change from 0 to 4 [ 2619.717967] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2619.755971] loop6: detected capacity change from 0 to 4 [ 2619.765948] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2619.883607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:08:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffff6, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:08:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x6c, r0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x55}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x9}, {0x12}, {0x1b}, {0x36, 0x1}, {0x3}, {0xb}, {0x36}, {0x4}, {0xe2450da7e270fd6d}, {0x3, 0x1}, {0x9}, {0x6c}, {0x1b, 0x1}, {0x30}, {0x12}, {0x2, 0x1}, {0x12, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x30}, {0x9, 0x1}, {0xb}, {0x24, 0x1}, {}, {0x36, 0x1}, {0x1b}, {0x3}, {0xc, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x12, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4020084}, 0x20040004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1a8, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x13c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x206c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff91ac}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x94}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2c22}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xce4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe977}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x700e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x55}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x34}]}]}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32], 0x36) syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000600)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac=@device_b, {0x8, 0x7f}}, {0x8, 0x1, 0x0, 0x0, 0x3}}, {@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1}, {0x4417}, @from_mac=@broadcast, @device_b, @from_mac=@device_b, {0x4, 0x6}}, {0x9, 0x1, 0x2, 0x1, 0x3f}}}, @ver_80211n={0x0, 0x7f, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xa8, "48fc5e9e349a9ab662da418607a08cfff6feb6503c855d62db9a8ddeba076fb28dfc6866b074155b2386797706a35dcfd9c45b1e52d0b32219552ab084f787380b1664938c376f74f508d0283a48793fa9d2cc045a8223d95ec355817ad0fc7f10debc746902935acf7cf579ffcadb24496fc6b6731d06950e510096430c6e6490412a1c2bf32e3553631c2614e4fd876500f7c4d16bd123fa0a23cace394717df5b3bec81380443"}]}, 0xf0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008845}, 0x41) 11:08:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffbf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000e004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000000)) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000100)) 11:08:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3009, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2635.268783] loop7: detected capacity change from 0 to 512 [ 2635.285802] EXT4-fs (loop7): inodes count not valid: 917536 vs 32 [ 2635.308176] loop3: detected capacity change from 0 to 264192 [ 2635.310984] loop7: detected capacity change from 0 to 512 [ 2635.321970] EXT4-fs (loop7): inodes count not valid: 917536 vs 32 [ 2635.322922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2635.333073] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2635.333813] EXT4-fs (loop3): group descriptors corrupted! [ 2635.336164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:08:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xedc000000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2635.354069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2635.355638] loop3: detected capacity change from 0 to 264192 [ 2635.363769] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2635.364647] EXT4-fs (loop3): group descriptors corrupted! 11:08:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200010004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2635.410697] loop7: detected capacity change from 0 to 512 [ 2635.420418] EXT4-fs (loop7): inodes count not valid: 1048608 vs 32 11:08:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000100)) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 11:08:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xfffffffc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200024004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2635.535416] loop3: detected capacity change from 0 to 264192 [ 2635.556850] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2635.558516] EXT4-fs (loop3): group descriptors corrupted! [ 2635.580687] loop3: detected capacity change from 0 to 264192 [ 2635.586732] loop6: detected capacity change from 0 to 4 [ 2635.596040] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2635.597815] EXT4-fs (loop3): group descriptors corrupted! [ 2635.601503] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2635.648110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2635.654334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2635.700271] loop6: detected capacity change from 0 to 4 [ 2635.705710] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 11:08:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x6, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x10001, 0x9, 0x0, 0x4, 0x4b, 0x9, 0x0, 0x1, 0x0, 0x80}, 0xffffffffffffffff, 0xc, r3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="55e40000000000000000ec"], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11:08:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x300c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:46 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200027004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x2) 11:08:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x36) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_b, @initial, @device_a, {0xa, 0x1}}, {0xe, 0x0, 0x3, 0x0, 0x1}}, {@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @from_mac, {0x4, 0x7}, @device_b}, {0x1, 0x1, 0x2, 0x1, 0x1}}}, @random="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"}, 0x39a) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x8, 0x1}}, @tdls_chsw_resp={0xc, 0x6, {0x60, {0x65, 0x12, {@random="2b43740ea9ec", @device_a, @broadcast}}, {0x68, 0x4, {0x0, 0x7}}}}}, 0x36) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000240)=@ctrl_frame=@bar={{}, {0xdb}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x2, {0x7, 0x1}, "7272da028aab88cb"}, {0x0, 0x2, {0x3, 0x1}, "a3f03578810dc0fe"}]}}, 0x2a) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@cts={{}, {0xb14}}, 0xa) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x2}, @device_b, @broadcast, @compressed={{0x0, 0x0, 0x1, 0x0, 0x8}, {0x7, 0x899}, "85f809c3a0c088f2"}}, 0x1c) [ 2646.220747] loop3: detected capacity change from 0 to 264192 [ 2646.243563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.247629] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2646.249079] EXT4-fs (loop3): group descriptors corrupted! [ 2646.250678] loop7: detected capacity change from 0 to 512 [ 2646.258867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.262193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.271659] EXT4-fs (loop7): inodes count not valid: 2555936 vs 32 [ 2646.273954] loop3: detected capacity change from 0 to 264192 [ 2646.280013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.295753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.296138] loop7: detected capacity change from 0 to 512 [ 2646.297593] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2646.299517] EXT4-fs (loop3): group descriptors corrupted! [ 2646.306675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.312640] EXT4-fs (loop7): inodes count not valid: 2555936 vs 32 [ 2646.323873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:08:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000300)={[{@data_err_abort}]}) 11:08:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 11:08:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:46 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200043004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02", 0x1, 0x1000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:08:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r3, 0x466d589e2983283, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x480c4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, 0x0, &(0x7f0000000100)) [ 2646.499340] loop3: detected capacity change from 0 to 4 [ 2646.506427] loop6: detected capacity change from 0 to 4 [ 2646.510785] loop7: detected capacity change from 0 to 512 [ 2646.524735] EXT4-fs (loop3): Can't read superblock on 2nd try [ 2646.526402] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2646.533592] EXT4-fs (loop7): inodes count not valid: 4390944 vs 32 11:08:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000300)={[{@data_err_abort}]}) [ 2646.554657] loop7: detected capacity change from 0 to 512 [ 2646.565561] EXT4-fs (loop7): inodes count not valid: 4390944 vs 32 11:08:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2646.655125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.693931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.712990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.715002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.767360] loop3: detected capacity change from 0 to 4 [ 2646.786590] EXT4-fs (loop3): Can't read superblock on 2nd try [ 2646.803706] loop3: detected capacity change from 0 to 4 [ 2646.814382] EXT4-fs (loop3): Can't read superblock on 2nd try [ 2649.300399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2649.307044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2649.312482] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2649.320196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2649.322837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2651.397206] Bluetooth: hci1: command tx timeout [ 2653.445368] Bluetooth: hci1: command tx timeout [ 2655.493151] Bluetooth: hci1: command tx timeout [ 2657.541215] Bluetooth: hci1: command tx timeout [ 2667.386904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2667.388094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2667.442699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2667.443790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2676.935536] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88803f1e9d40 (size 704): comm "syz-executor.0", pid 20565, jiffies 4297315937 hex dump (first 32 bytes): 40 eb 48 0e 80 88 ff ff 04 0e 0b 01 05 10 00 fd @.H............. 03 60 04 00 06 00 79 73 74 65 6d 64 2d 72 66 6b .`....ystemd-rfk backtrace (crc 82a918d5): kmem_cache_alloc_node_noprof+0x30f/0x3e0 kmalloc_reserve+0x189/0x2b0 __alloc_skb+0x161/0x370 vhci_write+0xbb/0x480 do_iter_readv_writev+0x5af/0x910 vfs_writev+0x2d4/0xcd0 do_writev+0x129/0x330 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888048e1a640 (size 232): comm "kworker/u11:0", pid 6924, jiffies 4297315937 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc b1c54b9d): kmem_cache_alloc_noprof+0x2fe/0x3d0 skb_clone+0x191/0x400 hci_event_packet+0x2d6/0x10e0 hci_rx_work+0x96c/0x1270 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x34b/0x430 ret_from_fork_asm+0x1a/0x30 BUG: leak checking failed VM DIAGNOSIS: 11:09:23 Registers: info registers vcpu 0 RAX=0000000000a43e47 RBX=0000000000000000 RCX=ffffffff84ba0167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3654 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86438950 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b9ee9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e6000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f95698351f0 CR3=000000000e60a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934303720657a697328203034643965 XMM03=3220646970202c22302e726f74756365 XMM04=202020200a2e2e2e2e2e2e2e2e2e2e2e XMM05=35302031302062302065302034302066 XMM06=206265203034202020200a3a29736574 XMM07=642078656820200a3733393531333739 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000107c23f RBX=0000000000000001 RCX=ffffffff84ba0167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3654 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86438950 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b9ee9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e6000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe45579910 CR3=000000001d891000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004188255240000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000