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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/204, 0xcc}], 0x3, &(0x7f0000001500)=""/253, 0xfd}, 0x5}], 0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7) (async) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x4004810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) (async) pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x10000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r7, 0x4, 0x0) (async) fcntl$setstatus(r7, 0x4, 0x0) r8 = dup(r7) pwritev2(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x87fffa0) (async) sendfile(r8, r7, 0x0, 0x87fffa0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:07:14 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x10fee}], 0x1, 0x1000012, 0x0, 0x0) [ 434.954632][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 434.961070][T14023] loop3: detected capacity change from 0 to 64 [ 434.967503][T14020] Trying to free block not in datazone [ 434.968673][T14020] Trying to free block not in datazone [ 434.978252][T14020] Trying to free block not in datazone [ 434.981290][T14020] Trying to free block not in datazone [ 434.987407][T14023] Trying to free block not in datazone [ 434.988877][T14023] Trying to free block not in datazone [ 434.991844][T14020] minix_free_block (loop1:6): bit already cleared [ 434.996817][T14023] Trying to free block not in datazone [ 434.998355][T14023] Trying to free block not in datazone [ 435.000005][T14020] Trying to free block not in datazone [ 435.001202][T14020] Trying to free block not in datazone 00:07:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 435.009624][T14023] minix_free_block (loop3:6): bit already cleared [ 435.011099][T14023] Trying to free block not in datazone [ 435.012351][T14023] Trying to free block not in datazone 00:07:15 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x300, 0x0) 00:07:15 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async, rerun: 32) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 32) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400, r1, &(0x7f0000000040)="63a645fcc43cd77d9e473022e63ff10b1a970896ea8ab5b2739a237059c3515991d1aeebb1ef941845449858a1408250e3947edaae3b3b5f31564746b1ca3cfb206effcf4baebf4b23308a5fdea862abbb8d3f674e74576766456bb81a582cf3cb56c7fc6ab03440e51c", 0x6a, 0x7, 0x0, 0x6, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x107, 0x7f, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)="99cf5f317f9715e8f355ab0181d4aa1ce89b92f45d301b0d82b39b7c59c46fd859842613cdbdb74e356716884d363e1da38e814bb6ad6943a15a2d0b55e92966e9ee7abca668ea376087d582a01cabee0f1bff4a15f156c1768f8ae3dab6f7865996331b7240626bfedc322140d2438299dd47d74cd899fd1ec51b9bdc4a102bc02c77d99ddb1380671405d5a1fc9f51bf40203bf2ecd5a0a9a14ce2db0cad988b9e31d86fcfd40cd996ee1147247975ea08b7955e6ef52c763da81a7b80e6bed9793b968770a01424216613941054a275b4e84576813329bd5242e93e88bca87a41119f5e00b10d9ce7216b01a2447e0192", 0xf2, 0x3, 0x0, 0x3}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = dup(r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000540)={'custom1\x00'}) 00:07:15 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x11fee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:15 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc00, 0x0) [ 435.075380][T14033] loop1: detected capacity change from 0 to 64 00:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 435.109837][T14033] Trying to free block not in datazone [ 435.111171][T14033] Trying to free block not in datazone [ 435.112323][T14033] Trying to free block not in datazone [ 435.127559][T14033] Trying to free block not in datazone [ 435.128836][T14033] minix_free_block (loop1:6): bit already cleared [ 435.137917][T14033] Trying to free block not in datazone [ 435.139227][T14033] Trying to free block not in datazone 00:07:15 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x12fee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:15 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe00, 0x0) 00:07:15 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400, r1, &(0x7f0000000040)="63a645fcc43cd77d9e473022e63ff10b1a970896ea8ab5b2739a237059c3515991d1aeebb1ef941845449858a1408250e3947edaae3b3b5f31564746b1ca3cfb206effcf4baebf4b23308a5fdea862abbb8d3f674e74576766456bb81a582cf3cb56c7fc6ab03440e51c", 0x6a, 0x7, 0x0, 0x6, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x107, 0x7f, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)="99cf5f317f9715e8f355ab0181d4aa1ce89b92f45d301b0d82b39b7c59c46fd859842613cdbdb74e356716884d363e1da38e814bb6ad6943a15a2d0b55e92966e9ee7abca668ea376087d582a01cabee0f1bff4a15f156c1768f8ae3dab6f7865996331b7240626bfedc322140d2438299dd47d74cd899fd1ec51b9bdc4a102bc02c77d99ddb1380671405d5a1fc9f51bf40203bf2ecd5a0a9a14ce2db0cad988b9e31d86fcfd40cd996ee1147247975ea08b7955e6ef52c763da81a7b80e6bed9793b968770a01424216613941054a275b4e84576813329bd5242e93e88bca87a41119f5e00b10d9ce7216b01a2447e0192", 0xf2, 0x3, 0x0, 0x3}]) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = dup(r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000540)={'custom1\x00'}) 00:07:15 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x402, 0x0) [ 435.228521][T14048] loop3: detected capacity change from 0 to 64 [ 435.244369][T14052] loop1: detected capacity change from 0 to 64 [ 435.248936][T14048] Trying to free block not in datazone [ 435.255147][T14048] Trying to free block not in datazone [ 435.257549][T14048] Trying to free block not in datazone [ 435.273682][T14052] Trying to free block not in datazone [ 435.276259][T14052] Trying to free block not in datazone [ 435.277475][T14048] Trying to free block not in datazone [ 435.278665][T14052] Trying to free block not in datazone [ 435.284534][T14048] minix_free_block (loop3:6): bit already cleared [ 435.287014][T14052] Trying to free block not in datazone [ 435.297607][T14048] Trying to free block not in datazone [ 435.302462][T14052] minix_free_block (loop1:6): bit already cleared [ 435.303795][T14052] Trying to free block not in datazone [ 435.304991][T14052] Trying to free block not in datazone [ 435.307006][T14048] Trying to free block not in datazone [ 435.574252][T14055] loop2: detected capacity change from 0 to 32768 [ 435.579174][T14055] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 435.599858][T14055] XFS (loop2): Ending clean mount 00:07:15 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x13fee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:15 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:07:15 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x406, 0x0) 00:07:15 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf00, 0x0) 00:07:15 executing program 2: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000001840)=ANY=[@ANYBLOB="006782497e640c096a3beca2ab34f5f0d2719b8f33cf68082281384e5cc89bdaff244b3ee948c96f5c4265904c5b5b9210ee86bd9e15ba174521323e401e17dd64f2d3a2336246f6ede1175305e5ca4674f2b7d983ee1e1ca3a90919f6daf4a3540f4a17700755eb554f81f92967b3fe37a162d6ae285e958da087d7982a753f3f"], 0x1, 0x9754, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACChIK6GCIqB0d3d3Snd3d3f8XwcOqPjA5f7+93vx+jzPi5k9O2bNZ3/eay32njVn76XmW2yugYExB97tvdO/d+Gu9yy3+GgLrXfSzoNv3muHhR8fevHw756MNcfQ0zmHns41MDAwaOhyBr172eDZTzxpmIHBA0P++3ujjjTyMKMODIw89OzQ5QzM/O7JKAe/d7u3PxAPdNIhP277dz/eabQhCxnyxTLLv7n2wMDAiP/w/UPGNe2/3FFpS805/3x/t3rfbZihVw/6+3XvnA5+92OU/QcGRtl34MPXjyG3He4fvvd/syE/c8zJB5a45xP42f/nWmrO+Rf8gP+QbXHYoZfNPGQb/+A2aOyD6/kOi63x6NApHDR04gb/w/bySaz3/59aas75Fhr48O14YOF5N33k7Xf2m4PnGRgYPO/AwOD5BgYGz/9Je9T/TJ/oyldVVVWfSHPONcOQ5+zDfODxwIjvPa6lx4WXvjHdAwMDgxd+93ni4OXfey5YVVVVVVVVVf+ezTnXDHPD8/8xP+r5/6RnbD1Wz/+rqqqqqqqq/u+04JxzzTDkuf4Hnv+P/1HP/5957KiD3v3b/zlmfve73vpk70RVVVVVVVVVfWTzLYjP/yf9qOf/l5846VU9/6+qqqqqqqr6v9OiM8w398A/vM7e0Iunfu96ev5/1sN3LftJjbeqqqqqqqqq/vu99eTpZ//9Nd8nHvjA672/09DfCww69txrrvnEBvrv0aB//X3I5p/0mP7/bYjziIdPOjCw9hKf9FDqE+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9y/P/91/8/6/gV33sv+M9POcMtp//9O9957//BCy/45Baf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcPotM0w5xcD7180y5LrZxh72nTeIf++ficw7Fi9488nePR2yogyM8/4yjn1n+Qu+vd+wgz4wiH9orJMPOmi1pV6e8YOnU334/Rjm/a9GO+mx9/4tyzAfuNGIH/LN7y3/vfvyQeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvv5w+Zs0nc+z/1x5mzUD87Zk3P+45x98L592JxN+tFz9s4Sd7lsxG+9N2eD/5tzNvdHz9mkqw/9QWPNMdzA8u/MzaCBgbHmGW5goyFnphthYGCseYfedvwht/3G2MMMDOz09zs65KsR3l8HB20+5DZLzbfYXO/upgYG/n769z7k/eyHHzryOYaezjn0dK53f8yYA39fFQfPfuJJwwyZi3+ajlFHGnmYUQcGRh56duhyBmZ992TkM9673Ye8z/oHBvrOy6xs/+7HO402MDAwypAvJl7hrG2GTP3/wvu0f+T//0f6kMv/xWuWQe+vj4OGfgy9zbtec86/4N9/1jvTMGTuhh162cxDTP6H39r+n/qX8U464sCkHzHej3hdnHei9WvN08fd8n/qdXFovON/xHg/4nV8P3S8Sz6w+6PvLup/bLwf2Nct9M7nOT7Ovm7go/d1w9ICVr5yog/u677z4UP8p93le3M0wgdu9GH7uvH3nGTzIcuf46P3dQsNGftw/7SvG2ZgYKy539vXDdnxzTfcwE5Dzkw/5Mz8ww0cOuTMDO+cGWng3CFnvrriOmuuNOSCBf51PZh60D/9gSZsZ/N9YDsb9A/3fdAH/r5z8Luno+z/3ns4fch+c9DQu/VfPleg9XbMjxjvR7z/FM7zkMtWOm7Ecf+n3n+KxjviR4/3w94v+0PHu+NLZ93zPzze97ez4f5huhb4ONvZpP+8nQ25i8P+w5bxcR+HrQS3f/fr8d9f2oabPfb+Y4rhPrDc/+oxxQIfvZ2NufoHvm+7fQcGfdTczP9x5mbCf9kHbfGPc/NxH29NPfm71w/7EXMzwqzLTfXe3Az/35yb+f+7czPHwLD/PDeDB+YdGBiYYuj+Yb6PMzfjf/TcfNz1ZmS4/btfr/z+RfPscPjF783NB+fiv5qb+f67czPp++vNFO9cN9kwA8MPP7DRChtssN50735+7+z0737+6G1wno8zl2P+z8zlBIM/bC7/vqqO+sBV+/8X2+C/7NPfW/48/925HHh/LgdW/+DGUv+u9fs/d/m7y99d/u7yd5e/u/zFfcjx//df/3+3MWfbeegvN4a7apLxtv2kx/sJ9x99/H+o7z8d/992vEmuGmbg/es+8vjsu7f5tzw+O/O7J6Mc/N7tPnh8kAf64cdn95115q3/l47P/n/qvW31Y/werv2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yHHP+f9r2/A3h4ukWeG3ogdLjHt1p6kU96vJ9w/9HH/4f6/tPx/0WW3urxYQbev+4jj/+/exvH8f/7Xp9vx3/n4//vbasd/6//ovzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yHHP+f472/AzjqqN03ee/vAW4Ya/vTP+nxfsL9px7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4ANvb/n91gsMjv//3+5D/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+P84f8ziv3z+mMV/hfwxi/9P8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/5/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/5/lj1n818sfs/ivnz9m8d8gf8zi//P8MYv/hvljFv9f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/L/DGL/6/yxyz+m+aPWfw3yx+z+P86f8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/03+mMX/t/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9d/pjF//f5Yxb/P+SPWfx3yh+z+O+cP2bx/2P+mMX/T/ljFv9d8scs/n/OH7P475o/ZvHfLX/M4r97/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfz/lj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/0ED+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+A/ljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Xf6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjF/0/5Yxb/XfLHLP5/zh+z+O+aP2bx3y1/zOK/e/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Qf/Z/6H99XP+mWfwPbfvHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fk/i/U/7/msR/0BX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH5P4v/Nl/v+axX9Q/pjFf5j8MYv/sPljFv/B+WMW/+Hyxyz+w+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjF/1P5Yxb/cfLHLP7j5o9Z/D+dP2bxHy9/zOI/fv6Yxf8z+WMW/wnyxyz+n80fs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8/lj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi//n88cs/lPnj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX+a/DGL/7T5Y4Mu3HW4gYGB/3j/6fLHLNv/9PljFv8Z8scs/jPmj1n8v5Y/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv+v549Z/GfLH7P4fyN/zOL/zfwxi//s+WMW/2/lj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/3b+mMX/O/ljFv+F8scs/t/NH7P4L5w/ZvH/Xv6Yxf/7+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf8H+WMW/6Xyxyz+P8wfs/j/KH/M4r90/pjFf5n8MYv/svljFv/l8scs/j/OH7P4L58/ZvFfIX/M4v+T/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/6f5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/2f5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOK/Yf6Yxf8X+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/r/OH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5M/ZvH/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+XP2bx/33+mMX/D/ljFv+d8scs/jvnj1n8/5g/ZvH/U/6YxX+X/DGL/5/zxyz+u+aPWfx3yx+z+O+eP2bx/0v+mMX/r/ljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv+/5Y9Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjEf9iB/DGL/6D8MYv/MPljFv9h88cs/oPzxyz+w+WPWfyHzx+z+I+QP2bxHzF/zOI/Uv6YxX/k/DGL/yj5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/p/LHLP7j5I9Z/MfNH7P4fzp/zOI/Xv6YxX/8/DGL/2fyxyz+E+SPWfw/mz9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+n8sfs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/8/nj1n8p84fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+1/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fz1/zOI/W/6Yxf8b+WMW/2/mj1n8Z88fs/h/K3/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+388cs/t/JH7P4L5Q/ZvH/bv6YxX/h/DGL//fyxyz+388fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+P8gfs/gvlT9m8f9h/pjF/0f5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/cf6YxX/5/DGL/wr5Yxb/n+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4/zR+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP4/yx+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/w3zxyz+v8gfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvH/df6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+b/DGL/2/zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/u/wxi//v88cs/n/IH7P475Q/ZvHfOX/M4v/H/DGL/5/yxyz+u+SPWfz/nD9m8d81f8ziv1v+mMV/9/wxi/9f8scs/n/NH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/y1/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP6DB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/KH7P4j5M/ZvEfN3/M4v/p/DGL/3j5Yxb/8fPHLP6fyR+z+E+QP2bx/2z+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8uf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfw/nz9m8Z86f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/1/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/1/DGL/2z5Yxb/b+SPWfy/mT9m8Z89f8zi/638MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+384fs/h/J3/M4r9Q/pjF/7v5Yxb/hfPHLP7fyx+z+H8/f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+P8gf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/8f5Yxb/5fPHLP4r5I9Z/H+SP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4/zR/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPH/u5/38gDA/+5/uvkj1m2/3Xzxyz+P8sfs/ivlz9m8V8/f8ziv0H+mMX/5/ljFv8N88cs/r/IH7P4b5Q/ZvHfOH/M4r9J/pjF/5f5Yxb/X+WPWfw3zR+z+G+WP2bx/3X+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/m/wxi/9v88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+O+UP2bx3zl/zOL/x/wxi/+f8scs/rvkj1n8/5w/ZvHfNX/M4r9b/pjFf/f8MYv/X/LHLP5/zR+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+P8tf8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+ww3kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi/+v88cs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/9/kj1n8f5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv/f5Y9Z/H+fP2bx/0P+mMV/p/wxi//O+WMW/z/mj1n8/5Q/ZvHfJX/M4v/n/DGL/675Yxb/3fLHLP67549Z/P+SP2bx/2v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/b/ljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9+IH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/6n8MYv/OPljFv9x88cs/p/OH7P4j5c/ZvEfP3/M4v+Z/DGL/wT5Yxb/z+aPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/+fyxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6Yxf/z+WMW/6nzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/LX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/l/PH7P4z5Y/ZvH/Rv6Yxf+b+WMW/9nzxyz+38ofs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/7fwxi/938scs/gvlj1n8v5s/ZvFfOH/M4v+9/DGL//fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/w/yxyz+S+WPWfx/mD9m8f9R/pjFf+n8sf9Q/0EfsB5+mfyx/1D/d/rH7X/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/X+ePWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/yR+z+P82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v8sfs/j/Pn/M4v+H/DGL/075Yxb/nfPHLP5/zB+z+P8pf8ziv0v+mMX/z/ljFv9d88cs/rvlj1n8d88fs/j/JX/M4v/X/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/9/yxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kPzASXGbxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/CAP5Yxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8hzbiP52z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+v84fs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23QvzXC4r9t2pjF/zf5Yxb/3+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvHfKX/M4r9z/pjF/4/5Yxb/P+WPWfx3yR+z+P85f8ziv2v+mMV/t/wxi//u+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S3T+H+/eWvwv1fl/vCz+l+WPWfwvzx+z+P8tf8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+Iw7kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi/+v88cs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/9/kj1n8f5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv/f5Y9Z/H+fP2bx/0P+mMV/p/wxi//O+WMW/z/mj1n8/5Q/ZvHfJX/M4v/n/DGL/675Yxb/3fLHLP67549Z/P+SP2bx/2v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/b/ljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9pIH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/6n8MYv/OPljFv9x88cs/p/OH7P4j5c/ZvEfP3/M4v+Z/DGL/wT5Yxb/z+aPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/+fyxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/1T/7j/C/Pq5/0yz+n2/7xyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Xf6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjF/0/5Yxb/XfLHLP5/zh+z+O+aP2bx3y1/zOK/e/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8/5Y/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv+RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/KH7P4j5M/ZvEfN3/M4v/p/LF/8t984D/Wf7z8Mcv2P37+mMX/M/ljFv8J8scs/p/NH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/5/PHLP5T549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1r+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/nj9m8Z8tf8zi/438MYv/N/PHLP6z549Z/L+VP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/9v5Yxb/7+SPWfwXyh+z+H83f8ziv3D+mMX/e/ljFv/v549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+P84f8ziv3z+mMV/hfwxi/9P8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/5/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/5/lj1n818sfs/ivnz9m8d8gf8zi//P8MYv/hvljFv9f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/L/DGL/6/yxyz+m+aPWfw3yx+z+P86f8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/03+mMX/t/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9d/pjF//f5Yxb/P+SPWfx3yh+z+O+cP2bx/2P+mMX/T/ljFv9d8scs/n/OH7P475o/ZvHfLX/M4r97/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfz/lj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/1EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8ofs/iPkz9m8R83f8zi/+n8MYv/ePljFv/x88cs/p/JH7P4T5A/ZvH/bP6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fy5/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/D+fP2bxnzp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//X8scs/jPlj1n8Z84fs/jPkj9m8Z81f8zi//X8MYv/bPljFv9v5I9Z/L+ZP2bxnz1/zOL/rfwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP7fzh+z+H8nf8ziv1D+mMX/u/ljFv+F88cs/t/LH7P4fz9/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4/yB/zOK/VP6Yxf+H+WMW/x/lj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/x/ljFv/l88cs/ivkj1n8f5I/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/j/NH/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/j/LH/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4/yJ/zOK/Uf6YxX/j/DGL/yb5Yxb/X+aPWfx/lT9m8d80f8ziv1n+mMX/1/ljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9v8scs/r/NH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8ziv1P+mMV/5/wxi/8f88cs/n/KH7P475I/ZvH/c/6YxX/X/DGL/275Yxb/3fPHLP5/yR+z+P81f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv7Ye/4DIw4M/Cf7n5k/Ztn+z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/v+WPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/GHfY4r+y0f9jZPFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Xf6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjF/0/5Yxb/XfLHLP5/zh+z+O+aP2bx3y1/zOK/e/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8/5Y/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/KH7P4j5M/ZvEfN3/M4v/p/DGL/3j5Yxb/8fPHLP6fyR+z+E+QP2bx/2z+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8uf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfw/nz9m8Z86f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/1/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/1/DGL/2z5Yxb/b+SPWfy/mT9m8Z89f8zi/638MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+384fs/h/J3/M4r9Q/pjF/7v5Yxb/hfPHLP7fyx+z+H8/f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+P8gf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/8f5Yxb/5fPHLP4r5I9Z/H+SP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4/zR/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4/yx/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+P8if8ziv1H+mMV/4/wxi/8m+WMW/1/mj1n8f5U/ZvHfNH/M4r9Z/pjF/9f5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/b/LHLP6/zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/+/yxyz+v88fs/j/IX/M4r9T/pjFf+f8sf9U/xE/4P/H/LH/VP+BD/j/KX/M4r9L/pjF/8/5Yxb/XfPHLP675Y9Z/HfPH7P4/yV/zOL/1/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi//f8scs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/Hew+g/70Vdb/He0+v8XWfx/lz9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx/1P+mMV/l/wxi/+f88cs/rvmj1n8d8sfs/jvnj9m8f9L/pjF/6/5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/v+WPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v/0x/Ef5v/huP5Ns/g/0/aPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/mMM5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svwxi//k+WMW/yn+f+zcf7jWdX3H8fvwO8vZp12Xes122aXFXJuRyGjUQlQUjz9OmWjmb9QjkCDyQxJMhY1W6th0qZsFm1g45mzVEoeb69eKhmXN1oitVU5xLYwxB4vMGbtuOIc4Z2/P1fmy79et9+PxB+fcN7xvlef18r69uC71D2Xp/xr9Q1n6j9Y/lKX/L+gfytL/KP1DWfr/ov6hLP1fq38oS/9f0j+Upf8v6x/K0v9o/UNZ+r9O/1CW/mP0D2Xp/3r9Q1n6H6N/KEv/sfqHsvQ/Vv9Qlv7j9A9l6f8r+oey9B+vfyhL/zfoH8rS/1f1D2XpP0H/UJb+b9Q/lKX/m/QPZen/a/qHsvR/s/6hLP0n6h/K0v84/UNZ+k/SP5Sl//H6h7L0P0H/UJb+J+ofytJ/sv6hLP1P0j+Upf/J+oey9J+ifyhL/1P0D2Xp36l/KEv/U/UPZel/mv6hLP1P1z+Upf8Z+oey9O/SP5Sl/1v0D2Xp/1b9Q1n6n6l/X0v3fMnS/236h7L0P0v/UJb+U/UPZel/tv6hLP3P0T+Upf/b9Q9l6X+u/qEs/d+hfyhL//P0D2Xpf77+oSz9L9A/lKX/hfqHsvS/SP9Qlv4X6x/K0v8S/UNZ+k/TP5Sl/6X6h7L0v0z/UJb+l+sfytK/W/9Qlv5X6B/K0n+6/qEs/WfoH8rSf6b+oSz936l/KEv/K/UPZek/S/9Qlv6z9Q9l6X+V/qEs/efoH8rS/2r9Q1n6z9U/lKX/PP1DWfrP1z+Upf8C/UNZ+l+jfyhL/4X6h7L0f5f+oSz9r9U/lKX/Iv1DWfov1j+Upf91+oey9H+3/qEs/a/XP5Sl/w36h7L0v1H/UJb+S/QPZem/VP9Qlv6/rn8oS//f0D+Upf8y/UNZ+r9H/1CW/r+pfyhL//fqH8rS/336h7L0v0n/UJb+N+sfytL/Fv1DWfr/lv6hLP2X6x/K0v+39Q9l6f87+oey9L9V/1CW/rfpH8rS/3f1D2Xp/379Q1n6365/KEv/O/QPZel/p/6hLP1/T/9Qlv6/r38oS/+79A9l6f8B/UNZ+n9Q/1CW/iv0D2Xpv1L/UJb+f6B/KEv/P9Q/lKX/3fqHsvRfpX8oS/979A9l6f8h/UNZ+n9Y/1CW/qv1D2Xpf6/+oSz9/0j/UJb+a/QPZen/x/qHsvS/T/9Qlv5/on8oS//79Q9l6f8R/UNZ+v+p/qEs/T+qfyhL/4/pH8rS/+P6h7L0/zP9Q1n6f0L/UJb+D+gfytJ/rf6hLP0f1D+Upf+f6x/K0n+d/qEs/R/SP5Sl/1/oH8rS/y/1D2Xp/7D+oSz9/0r/UJb+n9Q/lKX/p/QPZen/af1DWfp/Rv9Qlv6f1T+Upf9f6x/K0v9z+oey9P+8/qEs/dfrH8rS/wv6h7L0/xv9Q1n6b9A/lKX/I/qHsvT/ov6hLP2/pH8oS/9H9Q9l6f9l/UNZ+n9F/1CW/n+rfyhL/8f0D2Xp/1X9Q1n6/53+oSz9v6Z/KEv/v9c/lKX/Rv1DWfp/Xf9Qlv6b9A9l6f8P+oey9P9H/UNZ+n9D/1CW/v+kfyhL/2/qH8rS/1v6h7L0/7b+oSz9H9c/lKX/P+sfytL/Cf1DWfo/qX8oS//N+oey9H9K/1CW/v+ifyhL/+/oH8rS/1/1D2Xp/139Q1n6b9E/lKX/0/qHsvT/nv6hLP236h/K0v/f9A9l6b9N/1CW/v+ufyhL/2f0D2Xp/x/6h7L0365/KEv/HfqHsvT/T/1DWfp/X/9Qlv479Q9l6f8D/UNZ+j+rfyhL/x/qH8rS/zn9Q1n6/5f+oSz9n9c/lKX/j/QPZem/S/9Qkv4vb+kfytK/Q/9Qlv5D9A9l6T9U/1CW/sP0D2XpP1z/UJb+I/QPZek/Uv9Qlv6j9A9l6f8S/UNZ+h+gfyhL/5fqH8rS/2X6h7L0P1D/UJb+P6N/KEv/g/QP/dT1BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+L9m/qLFV06bNat7nm984xvf7P3mxf43EwAA8L/txx/6X+y/EwAAAAAAAAAAAAAAAAAAAMirif+d2Iv9zwgAAAAAAAAAAAAAAP/fdXYdv3VoR5+nhu774Ocf7d79ddzOc2esXv1g6f3a89OnBS85ZN8Hu3bt2rXymYmTex6ObLVa7b/ay3sej+p/3H79JYevOHTPozLpc3c+ftHUA0+ft/a2YV9feUvX08N3Pzu8dckVM2d1v35Iq1VOHN66tv3gmI5Wq5w8vHVr+8HY9oMpw1tr2g+O3f3gJa1Ptx+87rI5sy5vP3FK5d8z+GnR2bWkNbTPYlt9/m2w7/6XHP7EjN6vA7xk76sNa/Xs/4i1Xzyk38/1eoH9975+Ob7//gf9Dwi8oMHt/9lNvV8HeMn/8f7/oQ07F0c/98L77339coL9Q32Cz/99Ntr/c3+/z/+vCl5y7/1xozbc3t5/59n3vbLnqWE/yef/H79+ObH//of0+fzf/hw/uffz/8hWq5y0n78dkEpn19KtA73/D7z/YT/X76Zj3/3f8+XNL2vv/97nWst6nho+yP1PHuj9/6Z+f6/A4HR2rdrV7/1/EPtvjQ5ecu/+t6w9cPfn/833X3bwPj83mP2f1H//YxbMvnrM/EWLj545e9r07undV00YO/6YcRMmjB8/Zvcngj0/7udvCiSxf+//rQP63XS0Wt1779ffd8vk9v63PbTswz1PjRrk/k8e8P3/Vd7/IXTEkNaIEa1rpy1YMO+YPT/2Phy758c9vyzY/yD++//Io3p+We+fGXa0WofuvR990YSR7f1fN7es63lqxCD3P2XA/U/q+2eVwODs5/v/5f1u+uz/uC03LGzv/9Xff8XmnqcG+9//pwy4/7u9/8P+6Oxq1fom2t7/sSOXnlrtunT68z+oTxP7P3z7rTuqXZdT7R/q08T+py5/06XVrstp9g/1aWL/D86+eHm163K6/UN9mtj/8z+747Bq1+UM+4f6NLH/x77z1Opq16XL/qE+Tez/A3d1HVvturzF/qE+Tez/6Gt+MLHadXmr/UN9mtj/FS89a02163Km/UN9mtj/qbtOOLjadXmb/UN9mth/x9LvLql2Xc6yf6hPE/t/ctryOdWuy1T7h/o0sf81h49+ttp1Odv+oT5N7H/Z02+YUu26nGP/UJ8m9v+VO1Y8Vu26vN3+oT5N7P/jF7xiRbXrcq79Q32a2P8Pj3jogGrX5R32D/VpYv8bN655oNp1Oc/+oT5N7H/lmqFHVLsu59s/1KeJ/d94yvRHq12XC+wf6tPE/seN/9L51a7LhfYP9Wli/4d+9ptPVbsuF9k/1KeJ/Z/18ML51a7LxfYP9Wli/wsP+9iPql2XS+wf6tPE/t/cfdiMatdlmv1DfZrYf7ntgI3Vrsul9g/1aWL/521bNanadbnM/qE+Tex/3UGf/2i163K5/UN9mtj/9rlXTah2XbrtH+rTxP6//Z4b31vtulxh/1CfJvZ/+3NfK9Wuy3T7h/o0sf8tY8+7oNp1mWH/UJ8m9r/q9GceqXZdZto/1KeJ/S9f9/iCatflnfYP9Wli/+vXn/ZEtetypf1DfZrY/6tHjzmw2nWZZf9Qnyb2P+fcZR+sdl1m2z/Up4n9n3j/Ha+pdl2usn+oTxP7H/XViZ+odl3m2D/Up4n9f2ri+z5Z7bpcbf9Qn+r77/iJflV7/zsmHXlUpb9Eq8y1f6hPE+//mx4Ye2e16zLP/qE+Tez//Y/cVfG6zLd/qE8T+5/72ue3VbsuC+wf6tPE/t849ZxF1a7LNfYP9Wli/wffPeUL1a7LQvuH+jSx/wu/9b0zq12Xd9k/1KeJ/R95yKWvrHZdrrV/qE8T+58xc8PN1a7LIvuH+jSx/8krN42rdl0W2z/Up4n9H/Tk/HuqXZfr7B/q08T+tw495Ixq1+Xd9g/1aWL/917/8DeqXZfr7R/q08T+b77pI93VrssN9g/1aWL/n9k5Ynu163Kj/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CgAAP//ndjoVA==") (async) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000001840)=ANY=[@ANYBLOB="006782497e640c096a3beca2ab34f5f0d2719b8f33cf68082281384e5cc89bdaff244b3ee948c96f5c4265904c5b5b9210ee86bd9e15ba174521323e401e17dd64f2d3a2336246f6ede1175305e5ca4674f2b7d983ee1e1ca3a90919f6daf4a3540f4a17700755eb554f81f92967b3fe37a162d6ae285e958da087d7982a753f3f"], 0x1, 0x9754, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACChIK6GCIqB0d3d3Snd3d3f8XwcOqPjA5f7+93vx+jzPi5k9O2bNZ3/eay32njVn76XmW2yugYExB97tvdO/d+Gu9yy3+GgLrXfSzoNv3muHhR8fevHw756MNcfQ0zmHns41MDAwaOhyBr172eDZTzxpmIHBA0P++3ujjjTyMKMODIw89OzQ5QzM/O7JKAe/d7u3PxAPdNIhP277dz/eabQhCxnyxTLLv7n2wMDAiP/w/UPGNe2/3FFpS805/3x/t3rfbZihVw/6+3XvnA5+92OU/QcGRtl34MPXjyG3He4fvvd/syE/c8zJB5a45xP42f/nWmrO+Rf8gP+QbXHYoZfNPGQb/+A2aOyD6/kOi63x6NApHDR04gb/w/bySaz3/59aas75Fhr48O14YOF5N33k7Xf2m4PnGRgYPO/AwOD5BgYGz/9Je9T/TJ/oyldVVVWfSHPONcOQ5+zDfODxwIjvPa6lx4WXvjHdAwMDgxd+93ni4OXfey5YVVVVVVVVVf+ezTnXDHPD8/8xP+r5/6RnbD1Wz/+rqqqqqqqq/u+04JxzzTDkuf4Hnv+P/1HP/5957KiD3v3b/zlmfve73vpk70RVVVVVVVVVfWTzLYjP/yf9qOf/l5846VU9/6+qqqqqqqr6v9OiM8w398A/vM7e0Iunfu96ev5/1sN3LftJjbeqqqqqqqqq/vu99eTpZ//9Nd8nHvjA672/09DfCww69txrrvnEBvrv0aB//X3I5p/0mP7/bYjziIdPOjCw9hKf9FDqE+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9y/P/91/8/6/gV33sv+M9POcMtp//9O9957//BCy/45Baf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcPotM0w5xcD7180y5LrZxh72nTeIf++ficw7Fi9488nePR2yogyM8/4yjn1n+Qu+vd+wgz4wiH9orJMPOmi1pV6e8YOnU334/Rjm/a9GO+mx9/4tyzAfuNGIH/LN7y3/vfvyQeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvv5w+Zs0nc+z/1x5mzUD87Zk3P+45x98L592JxN+tFz9s4Sd7lsxG+9N2eD/5tzNvdHz9mkqw/9QWPNMdzA8u/MzaCBgbHmGW5goyFnphthYGCseYfedvwht/3G2MMMDOz09zs65KsR3l8HB20+5DZLzbfYXO/upgYG/n769z7k/eyHHzryOYaezjn0dK53f8yYA39fFQfPfuJJwwyZi3+ajlFHGnmYUQcGRh56duhyBmZ992TkM9673Ye8z/oHBvrOy6xs/+7HO402MDAwypAvJl7hrG2GTP3/wvu0f+T//0f6kMv/xWuWQe+vj4OGfgy9zbtec86/4N9/1jvTMGTuhh162cxDTP6H39r+n/qX8U464sCkHzHej3hdnHei9WvN08fd8n/qdXFovON/xHg/4nV8P3S8Sz6w+6PvLup/bLwf2Nct9M7nOT7Ovm7go/d1w9ICVr5yog/u677z4UP8p93le3M0wgdu9GH7uvH3nGTzIcuf46P3dQsNGftw/7SvG2ZgYKy539vXDdnxzTfcwE5Dzkw/5Mz8ww0cOuTMDO+cGWng3CFnvrriOmuuNOSCBf51PZh60D/9gSZsZ/N9YDsb9A/3fdAH/r5z8Luno+z/3ns4fch+c9DQu/VfPleg9XbMjxjvR7z/FM7zkMtWOm7Ecf+n3n+KxjviR4/3w94v+0PHu+NLZ93zPzze97ez4f5huhb4ONvZpP+8nQ25i8P+w5bxcR+HrQS3f/fr8d9f2oabPfb+Y4rhPrDc/+oxxQIfvZ2NufoHvm+7fQcGfdTczP9x5mbCf9kHbfGPc/NxH29NPfm71w/7EXMzwqzLTfXe3Az/35yb+f+7czPHwLD/PDeDB+YdGBiYYuj+Yb6PMzfjf/TcfNz1ZmS4/btfr/z+RfPscPjF783NB+fiv5qb+f67czPp++vNFO9cN9kwA8MPP7DRChtssN50735+7+z0737+6G1wno8zl2P+z8zlBIM/bC7/vqqO+sBV+/8X2+C/7NPfW/48/925HHh/LgdW/+DGUv+u9fs/d/m7y99d/u7yd5e/u/zFfcjx//df/3+3MWfbeegvN4a7apLxtv2kx/sJ9x99/H+o7z8d/992vEmuGmbg/es+8vjsu7f5tzw+O/O7J6Mc/N7tPnh8kAf64cdn95115q3/l47P/n/qvW31Y/werv2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yHHP+f9r2/A3h4ukWeG3ogdLjHt1p6kU96vJ9w/9HH/4f6/tPx/0WW3urxYQbev+4jj/+/exvH8f/7Xp9vx3/n4//vbasd/6//ovzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yHHP+f472/AzjqqN03ee/vAW4Ya/vTP+nxfsL9px7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4ANvb/n91gsMjv//3+5D/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+P84f8ziv3z+mMV/hfwxi/9P8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/5/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/5/lj1n818sfs/ivnz9m8d8gf8zi//P8MYv/hvljFv9f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/L/DGL/6/yxyz+m+aPWfw3yx+z+P86f8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/03+mMX/t/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9d/pjF//f5Yxb/P+SPWfx3yh+z+O+cP2bx/2P+mMX/T/ljFv9d8scs/n/OH7P475o/ZvHfLX/M4r97/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfz/lj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/0ED+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+A/ljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Xf6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjF/0/5Yxb/XfLHLP5/zh+z+O+aP2bx3y1/zOK/e/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Qf/Z/6H99XP+mWfwPbfvHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fk/i/U/7/msR/0BX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH5P4v/Nl/v+axX9Q/pjFf5j8MYv/sPljFv/B+WMW/+Hyxyz+w+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjF/1P5Yxb/cfLHLP7j5o9Z/D+dP2bxHy9/zOI/fv6Yxf8z+WMW/wnyxyz+n80fs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8/lj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi//n88cs/lPnj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX+a/DGL/7T5Y4Mu3HW4gYGB/3j/6fLHLNv/9PljFv8Z8scs/jPmj1n8v5Y/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv+v549Z/GfLH7P4fyN/zOL/zfwxi//s+WMW/2/lj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/3b+mMX/O/ljFv+F8scs/t/NH7P4L5w/ZvH/Xv6Yxf/7+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf8H+WMW/6Xyxyz+P8wfs/j/KH/M4r90/pjFf5n8MYv/svljFv/l8scs/j/OH7P4L58/ZvFfIX/M4v+T/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/6f5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/2f5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOK/Yf6Yxf8X+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/r/OH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5M/ZvH/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+XP2bx/33+mMX/D/ljFv+d8scs/jvnj1n8/5g/ZvH/U/6YxX+X/DGL/5/zxyz+u+aPWfx3yx+z+O+eP2bx/0v+mMX/r/ljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv+/5Y9Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjEf9iB/DGL/6D8MYv/MPljFv9h88cs/oPzxyz+w+WPWfyHzx+z+I+QP2bxHzF/zOI/Uv6YxX/k/DGL/yj5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/p/LHLP7j5I9Z/MfNH7P4fzp/zOI/Xv6YxX/8/DGL/2fyxyz+E+SPWfw/mz9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+n8sfs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/8/nj1n8p84fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+1/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fz1/zOI/W/6Yxf8b+WMW/2/mj1n8Z88fs/h/K3/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+388cs/t/JH7P4L5Q/ZvH/bv6YxX/h/DGL//fyxyz+388fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+P8gfs/gvlT9m8f9h/pjF/0f5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/cf6YxX/5/DGL/wr5Yxb/n+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4/zR+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP4/yx+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/w3zxyz+v8gfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvH/df6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+b/DGL/2/zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/u/wxi//v88cs/n/IH7P475Q/ZvHfOX/M4v/H/DGL/5/yxyz+u+SPWfz/nD9m8d81f8ziv1v+mMV/9/wxi/9f8scs/n/NH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/y1/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP6DB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/KH7P4j5M/ZvEfN3/M4v/p/DGL/3j5Yxb/8fPHLP6fyR+z+E+QP2bx/2z+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8uf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfw/nz9m8Z86f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/1/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/1/DGL/2z5Yxb/b+SPWfy/mT9m8Z89f8zi/638MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+384fs/h/J3/M4r9Q/pjF/7v5Yxb/hfPHLP7fyx+z+H8/f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+P8gf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/8f5Yxb/5fPHLP4r5I9Z/H+SP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4/zR/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPH/u5/38gDA/+5/uvkj1m2/3Xzxyz+P8sfs/ivlz9m8V8/f8ziv0H+mMX/5/ljFv8N88cs/r/IH7P4b5Q/ZvHfOH/M4r9J/pjF/5f5Yxb/X+WPWfw3zR+z+G+WP2bx/3X+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/m/wxi/9v88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+O+UP2bx3zl/zOL/x/wxi/+f8scs/rvkj1n8/5w/ZvHfNX/M4r9b/pjFf/f8MYv/X/LHLP5/zR+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+P8tf8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+ww3kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi/+v88cs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/9/kj1n8f5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv/f5Y9Z/H+fP2bx/0P+mMV/p/wxi//O+WMW/z/mj1n8/5Q/ZvHfJX/M4v/n/DGL/675Yxb/3fLHLP67549Z/P+SP2bx/2v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/b/ljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9+IH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/6n8MYv/OPljFv9x88cs/p/OH7P4j5c/ZvEfP3/M4v+Z/DGL/wT5Yxb/z+aPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/+fyxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6Yxf/z+WMW/6nzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/LX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/l/PH7P4z5Y/ZvH/Rv6Yxf+b+WMW/9nzxyz+38ofs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/7fwxi/938scs/gvlj1n8v5s/ZvFfOH/M4v+9/DGL//fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/w/yxyz+S+WPWfx/mD9m8f9R/pjFf+n8sf9Q/0EfsB5+mfyx/1D/d/rH7X/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/X+ePWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/yR+z+P82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v8sfs/j/Pn/M4v+H/DGL/075Yxb/nfPHLP5/zB+z+P8pf8ziv0v+mMX/z/ljFv9d88cs/rvlj1n8d88fs/j/JX/M4v/X/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/9/yxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kPzASXGbxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/CAP5Yxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8hzbiP52z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+v84fs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23QvzXC4r9t2pjF/zf5Yxb/3+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvHfKX/M4r9z/pjF/4/5Yxb/P+WPWfx3yR+z+P85f8ziv2v+mMV/t/wxi//u+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S3T+H+/eWvwv1fl/vCz+l+WPWfwvzx+z+P8tf8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+Iw7kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi/+v88cs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/9/kj1n8f5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv/f5Y9Z/H+fP2bx/0P+mMV/p/wxi//O+WMW/z/mj1n8/5Q/ZvHfJX/M4v/n/DGL/675Yxb/3fLHLP67549Z/P+SP2bx/2v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/b/ljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9pIH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/6n8MYv/OPljFv9x88cs/p/OH7P4j5c/ZvEfP3/M4v+Z/DGL/wT5Yxb/z+aPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/+fyxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/1T/7j/C/Pq5/0yz+n2/7xyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Xf6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjF/0/5Yxb/XfLHLP5/zh+z+O+aP2bx3y1/zOK/e/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8/5Y/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv+RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/KH7P4j5M/ZvEfN3/M4v/p/LF/8t984D/Wf7z8Mcv2P37+mMX/M/ljFv8J8scs/p/NH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/5/PHLP5T549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1r+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/nj9m8Z8tf8zi/438MYv/N/PHLP6z549Z/L+VP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/9v5Yxb/7+SPWfwXyh+z+H83f8ziv3D+mMX/e/ljFv/v549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+P84f8ziv3z+mMV/hfwxi/9P8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/5/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/5/lj1n818sfs/ivnz9m8d8gf8zi//P8MYv/hvljFv9f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/L/DGL/6/yxyz+m+aPWfw3yx+z+P86f8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/03+mMX/t/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9d/pjF//f5Yxb/P+SPWfx3yh+z+O+cP2bx/2P+mMX/T/ljFv9d8scs/n/OH7P475o/ZvHfLX/M4r97/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfz/lj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/1EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8ofs/iPkz9m8R83f8zi/+n8MYv/ePljFv/x88cs/p/JH7P4T5A/ZvH/bP6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fy5/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/D+fP2bxnzp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//X8scs/jPlj1n8Z84fs/jPkj9m8Z81f8zi//X8MYv/bPljFv9v5I9Z/L+ZP2bxnz1/zOL/rfwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP7fzh+z+H8nf8ziv1D+mMX/u/ljFv+F88cs/t/LH7P4fz9/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4/yB/zOK/VP6Yxf+H+WMW/x/lj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/x/ljFv/l88cs/ivkj1n8f5I/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/j/NH/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/j/LH/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4/yJ/zOK/Uf6YxX/j/DGL/yb5Yxb/X+aPWfx/lT9m8d80f8ziv1n+mMX/1/ljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9v8scs/r/NH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8ziv1P+mMV/5/wxi/8f88cs/n/KH7P475I/ZvH/c/6YxX/X/DGL/275Yxb/3fPHLP5/yR+z+P81f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv7Ye/4DIw4M/Cf7n5k/Ztn+z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/v+WPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/GHfY4r+y0f9jZPFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Xf6Yxf/3+WMW/z/kj1n8d8ofs/jvnD9m8f9j/pjF/0/5Yxb/XfLHLP5/zh+z+O+aP2bx3y1/zOK/e/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8/5Y/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/KH7P4j5M/ZvEfN3/M4v/p/DGL/3j5Yxb/8fPHLP6fyR+z+E+QP2bx/2z+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8uf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfw/nz9m8Z86f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/1/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/1/DGL/2z5Yxb/b+SPWfy/mT9m8Z89f8zi/638MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+384fs/h/J3/M4r9Q/pjF/7v5Yxb/hfPHLP7fyx+z+H8/f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+P8gf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjF/8f5Yxb/5fPHLP4r5I9Z/H+SP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4/zR/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4/yx/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+P8if8ziv1H+mMV/4/wxi/8m+WMW/1/mj1n8f5U/ZvHfNH/M4r9Z/pjF/9f5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/b/LHLP6/zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/+/yxyz+v88fs/j/IX/M4r9T/pjFf+f8sf9U/xE/4P/H/LH/VP+BD/j/KX/M4r9L/pjF/8/5Yxb/XfPHLP675Y9Z/HfPH7P4/yV/zOL/1/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi//f8scs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/j/On/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9N/pjF/7f5Yxb/7fLHLP7b549Z/Hew+g/70Vdb/He0+v8XWfx/lz9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx/1P+mMV/l/wxi/+f88cs/rvmj1n8d8sfs/jvnj9m8f9L/pjF/6/5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/v+WPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v/0x/Ef5v/huP5Ns/g/0/aPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/mMM5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svwxi//k+WMW/yn+f+zcf7jWdX3H8fvwO8vZp12Xes122aXFXJuRyGjUQlQUjz9OmWjmb9QjkCDyQxJMhY1W6th0qZsFm1g45mzVEoeb69eKhmXN1oitVU5xLYwxB4vMGbtuOIc4Z2/P1fmy79et9+PxB+fcN7xvlef18r69uC71D2Xp/xr9Q1n6j9Y/lKX/L+gfytL/KP1DWfr/ov6hLP1fq38oS/9f0j+Upf8v6x/K0v9o/UNZ+r9O/1CW/mP0D2Xp/3r9Q1n6H6N/KEv/sfqHsvQ/Vv9Qlv7j9A9l6f8r+oey9B+vfyhL/zfoH8rS/1f1D2XpP0H/UJb+b9Q/lKX/m/QPZen/a/qHsvR/s/6hLP0n6h/K0v84/UNZ+k/SP5Sl//H6h7L0P0H/UJb+J+ofytJ/sv6hLP1P0j+Upf/J+oey9J+ifyhL/1P0D2Xp36l/KEv/U/UPZel/mv6hLP1P1z+Upf8Z+oey9O/SP5Sl/1v0D2Xp/1b9Q1n6n6l/X0v3fMnS/236h7L0P0v/UJb+U/UPZel/tv6hLP3P0T+Upf/b9Q9l6X+u/qEs/d+hfyhL//P0D2Xpf77+oSz9L9A/lKX/hfqHsvS/SP9Qlv4X6x/K0v8S/UNZ+k/TP5Sl/6X6h7L0v0z/UJb+l+sfytK/W/9Qlv5X6B/K0n+6/qEs/WfoH8rSf6b+oSz936l/KEv/K/UPZek/S/9Qlv6z9Q9l6X+V/qEs/efoH8rS/2r9Q1n6z9U/lKX/PP1DWfrP1z+Upf8C/UNZ+l+jfyhL/4X6h7L0f5f+oSz9r9U/lKX/Iv1DWfov1j+Upf91+oey9H+3/qEs/a/XP5Sl/w36h7L0v1H/UJb+S/QPZem/VP9Qlv6/rn8oS//f0D+Upf8y/UNZ+r9H/1CW/r+pfyhL//fqH8rS/336h7L0v0n/UJb+N+sfytL/Fv1DWfr/lv6hLP2X6x/K0v+39Q9l6f87+oey9L9V/1CW/rfpH8rS/3f1D2Xp/379Q1n6365/KEv/O/QPZel/p/6hLP1/T/9Qlv6/r38oS/+79A9l6f8B/UNZ+n9Q/1CW/iv0D2Xpv1L/UJb+f6B/KEv/P9Q/lKX/3fqHsvRfpX8oS/979A9l6f8h/UNZ+n9Y/1CW/qv1D2Xpf6/+oSz9/0j/UJb+a/QPZen/x/qHsvS/T/9Qlv5/on8oS//79Q9l6f8R/UNZ+v+p/qEs/T+qfyhL/4/pH8rS/+P6h7L0/zP9Q1n6f0L/UJb+D+gfytJ/rf6hLP0f1D+Upf+f6x/K0n+d/qEs/R/SP5Sl/1/oH8rS/y/1D2Xp/7D+oSz9/0r/UJb+n9Q/lKX/p/QPZen/af1DWfp/Rv9Qlv6f1T+Upf9f6x/K0v9z+oey9P+8/qEs/dfrH8rS/wv6h7L0/xv9Q1n6b9A/lKX/I/qHsvT/ov6hLP2/pH8oS/9H9Q9l6f9l/UNZ+n9F/1CW/n+rfyhL/8f0D2Xp/1X9Q1n6/53+oSz9v6Z/KEv/v9c/lKX/Rv1DWfp/Xf9Qlv6b9A9l6f8P+oey9P9H/UNZ+n9D/1CW/v+kfyhL/2/qH8rS/1v6h7L0/7b+oSz9H9c/lKX/P+sfytL/Cf1DWfo/qX8oS//N+oey9H9K/1CW/v+ifyhL/+/oH8rS/1/1D2Xp/139Q1n6b9E/lKX/0/qHsvT/nv6hLP236h/K0v/f9A9l6b9N/1CW/v+ufyhL/2f0D2Xp/x/6h7L0365/KEv/HfqHsvT/T/1DWfp/X/9Qlv479Q9l6f8D/UNZ+j+rfyhL/x/qH8rS/zn9Q1n6/5f+oSz9n9c/lKX/j/QPZem/S/9Qkv4vb+kfytK/Q/9Qlv5D9A9l6T9U/1CW/sP0D2XpP1z/UJb+I/QPZek/Uv9Qlv6j9A9l6f8S/UNZ+h+gfyhL/5fqH8rS/2X6h7L0P1D/UJb+P6N/KEv/g/QP/dT1BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+L9m/qLFV06bNat7nm984xvf7P3mxf43EwAA8L/txx/6X+y/EwAAAAAAAAAAAAAAAAAAAMirif+d2Iv9zwgAAAAAAAAAAAAAAP/fdXYdv3VoR5+nhu774Ocf7d79ddzOc2esXv1g6f3a89OnBS85ZN8Hu3bt2rXymYmTex6ObLVa7b/ay3sej+p/3H79JYevOHTPozLpc3c+ftHUA0+ft/a2YV9feUvX08N3Pzu8dckVM2d1v35Iq1VOHN66tv3gmI5Wq5w8vHVr+8HY9oMpw1tr2g+O3f3gJa1Ptx+87rI5sy5vP3FK5d8z+GnR2bWkNbTPYlt9/m2w7/6XHP7EjN6vA7xk76sNa/Xs/4i1Xzyk38/1eoH9975+Ob7//gf9Dwi8oMHt/9lNvV8HeMn/8f7/oQ07F0c/98L77339coL9Q32Cz/99Ntr/c3+/z/+vCl5y7/1xozbc3t5/59n3vbLnqWE/yef/H79+ObH//of0+fzf/hw/uffz/8hWq5y0n78dkEpn19KtA73/D7z/YT/X76Zj3/3f8+XNL2vv/97nWst6nho+yP1PHuj9/6Z+f6/A4HR2rdrV7/1/EPtvjQ5ecu/+t6w9cPfn/833X3bwPj83mP2f1H//YxbMvnrM/EWLj545e9r07undV00YO/6YcRMmjB8/Zvcngj0/7udvCiSxf+//rQP63XS0Wt1779ffd8vk9v63PbTswz1PjRrk/k8e8P3/Vd7/IXTEkNaIEa1rpy1YMO+YPT/2Phy758c9vyzY/yD++//Io3p+We+fGXa0WofuvR990YSR7f1fN7es63lqxCD3P2XA/U/q+2eVwODs5/v/5f1u+uz/uC03LGzv/9Xff8XmnqcG+9//pwy4/7u9/8P+6Oxq1fom2t7/sSOXnlrtunT68z+oTxP7P3z7rTuqXZdT7R/q08T+py5/06XVrstp9g/1aWL/D86+eHm163K6/UN9mtj/8z+747Bq1+UM+4f6NLH/x77z1Opq16XL/qE+Tez/A3d1HVvturzF/qE+Tez/6Gt+MLHadXmr/UN9mtj/FS89a02163Km/UN9mtj/qbtOOLjadXmb/UN9mth/x9LvLql2Xc6yf6hPE/t/ctryOdWuy1T7h/o0sf81h49+ttp1Odv+oT5N7H/Z02+YUu26nGP/UJ8m9v+VO1Y8Vu26vN3+oT5N7P/jF7xiRbXrcq79Q32a2P8Pj3jogGrX5R32D/VpYv8bN655oNp1Oc/+oT5N7H/lmqFHVLsu59s/1KeJ/d94yvRHq12XC+wf6tPE/seN/9L51a7LhfYP9Wli/4d+9ptPVbsuF9k/1KeJ/Z/18ML51a7LxfYP9Wli/wsP+9iPql2XS+wf6tPE/t/cfdiMatdlmv1DfZrYf7ntgI3Vrsul9g/1aWL/521bNanadbnM/qE+Tex/3UGf/2i163K5/UN9mtj/9rlXTah2XbrtH+rTxP6//Z4b31vtulxh/1CfJvZ/+3NfK9Wuy3T7h/o0sf8tY8+7oNp1mWH/UJ8m9r/q9GceqXZdZto/1KeJ/S9f9/iCatflnfYP9Wli/+vXn/ZEtetypf1DfZrY/6tHjzmw2nWZZf9Qnyb2P+fcZR+sdl1m2z/Up4n9n3j/Ha+pdl2usn+oTxP7H/XViZ+odl3m2D/Up4n9f2ri+z5Z7bpcbf9Qn+r77/iJflV7/zsmHXlUpb9Eq8y1f6hPE+//mx4Ye2e16zLP/qE+Tez//Y/cVfG6zLd/qE8T+5/72ue3VbsuC+wf6tPE/t849ZxF1a7LNfYP9Wli/wffPeUL1a7LQvuH+jSx/wu/9b0zq12Xd9k/1KeJ/R95yKWvrHZdrrV/qE8T+58xc8PN1a7LIvuH+jSx/8krN42rdl0W2z/Up4n9H/Tk/HuqXZfr7B/q08T+tw495Ixq1+Xd9g/1aWL/917/8DeqXZfr7R/q08T+b77pI93VrssN9g/1aWL/n9k5Ynu163Kj/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CgAAP//ndjoVA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/204, 0xcc}], 0x3, &(0x7f0000001500)=""/253, 0xfd}, 0x5}], 0x1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x4004810) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x10000) (async) sendfile(r4, r4, 0x0, 0x10000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r7, 0x4, 0x0) (async) fcntl$setstatus(r7, 0x4, 0x0) dup(r7) (async) r8 = dup(r7) pwritev2(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x87fffa0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.952129][T14073] loop1: detected capacity change from 0 to 64 [ 435.952426][T14075] loop3: detected capacity change from 0 to 64 00:07:15 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x14fee}], 0x1, 0x1000012, 0x0, 0x0) [ 435.976895][T14075] Trying to free block not in datazone [ 435.978245][T14075] Trying to free block not in datazone [ 435.979591][T14075] Trying to free block not in datazone [ 435.980784][T14075] Trying to free block not in datazone [ 435.982002][T14075] minix_free_block (loop3:6): bit already cleared [ 435.983599][T14075] Trying to free block not in datazone [ 435.988343][T14075] Trying to free block not in datazone [ 436.011720][T14073] Trying to free block not in datazone [ 436.015285][T14073] Trying to free block not in datazone 00:07:15 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1100, 0x0) [ 436.018026][T14073] Trying to free block not in datazone [ 436.025922][T14073] Trying to free block not in datazone [ 436.029633][T14073] minix_free_block (loop1:6): bit already cleared 00:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 436.034184][T14073] Trying to free block not in datazone [ 436.037759][T14073] Trying to free block not in datazone 00:07:16 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x15fee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:16 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x600, 0x0) 00:07:16 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) [ 436.109955][T14085] loop3: detected capacity change from 0 to 64 [ 436.130214][T14085] Trying to free block not in datazone [ 436.131555][T14085] Trying to free block not in datazone [ 436.132973][T14085] Trying to free block not in datazone [ 436.134682][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 436.135963][T14090] loop1: detected capacity change from 0 to 64 [ 436.145766][T14085] Trying to free block not in datazone [ 436.147200][T14085] minix_free_block (loop3:6): bit already cleared [ 436.151314][T14085] Trying to free block not in datazone 00:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 436.156283][T14085] Trying to free block not in datazone 00:07:16 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x16fee}], 0x1, 0x1000012, 0x0, 0x0) [ 436.172622][T14090] Trying to free block not in datazone [ 436.174042][T14090] Trying to free block not in datazone [ 436.179743][T14090] Trying to free block not in datazone [ 436.181160][T14090] Trying to free block not in datazone [ 436.199633][T14090] minix_free_block (loop1:6): bit already cleared [ 436.200994][T14090] Trying to free block not in datazone [ 436.202173][T14090] Trying to free block not in datazone 00:07:16 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1200, 0x0) 00:07:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:16 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x604, 0x0) [ 436.266798][T14100] loop3: detected capacity change from 0 to 64 [ 436.282532][T14100] Trying to free block not in datazone [ 436.283793][T14100] Trying to free block not in datazone [ 436.285198][T14100] Trying to free block not in datazone [ 436.286523][T14100] Trying to free block not in datazone [ 436.307032][T14100] minix_free_block (loop3:6): bit already cleared [ 436.309809][T14100] Trying to free block not in datazone [ 436.313005][T14105] loop1: detected capacity change from 0 to 64 [ 436.314490][T14100] Trying to free block not in datazone [ 436.333978][T14105] Trying to free block not in datazone [ 436.335154][T14105] Trying to free block not in datazone [ 436.336218][T14105] Trying to free block not in datazone [ 436.337354][T14105] Trying to free block not in datazone [ 436.338529][T14105] minix_free_block (loop1:6): bit already cleared [ 436.355983][T14105] Trying to free block not in datazone [ 436.358686][T14105] Trying to free block not in datazone [ 436.722318][T14108] loop2: detected capacity change from 0 to 32768 [ 436.728259][T14108] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 436.757201][T14108] XFS (loop2): Ending clean mount 00:07:17 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x17fee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:17 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:07:17 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000, 0x0) 00:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 437.119973][T14125] loop3: detected capacity change from 0 to 64 00:07:17 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc00, 0x0) 00:07:17 executing program 2: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000001840)=ANY=[@ANYBLOB="006782497e640c096a3beca2ab34f5f0d2719b8f33cf68082281384e5cc89bdaff244b3ee948c96f5c4265904c5b5b9210ee86bd9e15ba174521323e401e17dd64f2d3a2336246f6ede1175305e5ca4674f2b7d983ee1e1ca3a90919f6daf4a3540f4a17700755eb554f81f92967b3fe37a162d6ae285e958da087d7982a753f3f"], 0x1, 0x9754, &(0x7f000001c600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/204, 0xcc}], 0x3, &(0x7f0000001500)=""/253, 0xfd}, 0x5}], 0x1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x4004810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x10000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r7, 0x4, 0x0) r8 = dup(r7) pwritev2(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x87fffa0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 437.136062][T14128] loop1: detected capacity change from 0 to 64 [ 437.147499][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb 00:07:17 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x18fee}], 0x1, 0x1000012, 0x0, 0x0) [ 437.165181][T14128] Trying to free block not in datazone [ 437.166771][T14128] Trying to free block not in datazone [ 437.168312][T14128] Trying to free block not in datazone [ 437.169899][T14125] Trying to free block not in datazone [ 437.170453][T14128] Trying to free block not in datazone [ 437.171053][T14125] Trying to free block not in datazone [ 437.171063][T14125] Trying to free block not in datazone [ 437.171070][T14125] Trying to free block not in datazone [ 437.171076][T14125] minix_free_block (loop3:6): bit already cleared [ 437.171104][T14125] Trying to free block not in datazone [ 437.178300][T14128] minix_free_block (loop1:6): bit already cleared [ 437.184991][T14128] Trying to free block not in datazone [ 437.187645][T14128] Trying to free block not in datazone 00:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 437.215279][T14125] Trying to free block not in datazone 00:07:17 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x9a, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:17 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000, 0x0) 00:07:17 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe00, 0x0) 00:07:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 437.298446][T14137] loop3: detected capacity change from 0 to 64 [ 437.323353][T14141] loop1: detected capacity change from 0 to 64 [ 437.325197][T14137] Trying to free block not in datazone [ 437.326426][T14137] Trying to free block not in datazone [ 437.327733][T14137] Trying to free block not in datazone 00:07:17 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x19fee}], 0x1, 0x1000012, 0x0, 0x0) [ 437.342755][T14141] Trying to free block not in datazone [ 437.343587][T14137] Trying to free block not in datazone [ 437.345180][T14137] minix_free_block (loop3:6): bit already cleared [ 437.346559][T14137] Trying to free block not in datazone [ 437.347657][T14141] Trying to free block not in datazone [ 437.350671][T14137] Trying to free block not in datazone [ 437.356386][T14141] Trying to free block not in datazone [ 437.358872][T14141] Trying to free block not in datazone [ 437.384910][T14141] minix_free_block (loop1:6): bit already cleared [ 437.386390][T14141] Trying to free block not in datazone [ 437.387643][T14141] Trying to free block not in datazone [ 437.748859][T14146] loop2: detected capacity change from 0 to 32768 [ 437.753992][T14146] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 437.777770][T14146] XFS (loop2): Ending clean mount 00:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:18 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4100, 0x0) 00:07:18 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf00, 0x0) [ 438.461315][T14160] loop3: detected capacity change from 0 to 64 00:07:18 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1afee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 438.484915][T14164] loop1: detected capacity change from 0 to 64 00:07:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18680000010000000000000008000000851000000000000005c7000480000000180000000700000000000000080000008500000024000000a498f4ffffffffff186200001000000000000000faffffff18220000", @ANYRES32=r0, @ANYBLOB="000000008207000048137f20c8ffff7fa3b01b07000000d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:07:18 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x9a, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 438.507035][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb 00:07:18 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1bfee}], 0x1, 0x1000012, 0x0, 0x0) [ 438.535566][T14164] Trying to free block not in datazone [ 438.536893][T14164] Trying to free block not in datazone [ 438.561581][T14160] Trying to free block not in datazone [ 438.562948][T14160] Trying to free block not in datazone [ 438.564280][T14160] Trying to free block not in datazone [ 438.566724][T14160] Trying to free block not in datazone [ 438.569400][T14164] Trying to free block not in datazone [ 438.570546][T14164] Trying to free block not in datazone [ 438.571657][T14164] minix_free_block (loop1:6): bit already cleared [ 438.573138][T14164] Trying to free block not in datazone [ 438.574456][T14164] Trying to free block not in datazone [ 438.582336][T14160] minix_free_block (loop3:6): bit already cleared [ 438.588556][T14160] Trying to free block not in datazone [ 438.596852][T14160] Trying to free block not in datazone 00:07:18 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6f01, 0x0) 00:07:18 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1cfee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:18 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1100, 0x0) [ 438.700809][T14174] loop1: detected capacity change from 0 to 64 [ 438.704376][T14177] loop3: detected capacity change from 0 to 64 [ 438.716954][T14174] Trying to free block not in datazone [ 438.718262][T14174] Trying to free block not in datazone 00:07:18 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x9a, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_setup(0x9a, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) [ 438.729805][T14177] Trying to free block not in datazone [ 438.730942][T14177] Trying to free block not in datazone [ 438.732201][T14177] Trying to free block not in datazone [ 438.733397][T14177] Trying to free block not in datazone [ 438.734527][T14177] minix_free_block (loop3:6): bit already cleared [ 438.735918][T14177] Trying to free block not in datazone [ 438.759506][T14174] Trying to free block not in datazone [ 438.760773][T14174] Trying to free block not in datazone [ 438.764956][T14174] minix_free_block (loop1:6): bit already cleared 00:07:18 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1dfee}], 0x1, 0x1000012, 0x0, 0x0) [ 438.773906][T14174] Trying to free block not in datazone [ 438.775131][T14174] Trying to free block not in datazone [ 438.781818][T14177] Trying to free block not in datazone 00:07:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:18 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1200, 0x0) 00:07:18 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f, 0x0) [ 438.881704][T14195] loop1: detected capacity change from 0 to 64 [ 438.895043][T14196] loop3: detected capacity change from 0 to 64 00:07:18 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1efee}], 0x1, 0x1000012, 0x0, 0x0) [ 438.910140][T14196] Trying to free block not in datazone [ 438.915779][T14196] Trying to free block not in datazone [ 438.919264][T14196] Trying to free block not in datazone [ 438.925072][T14195] Trying to free block not in datazone [ 438.927983][T14196] Trying to free block not in datazone [ 438.932577][T14196] minix_free_block (loop3:6): bit already cleared [ 438.936346][T14196] Trying to free block not in datazone [ 438.942024][T14196] Trying to free block not in datazone [ 438.949563][T14195] Trying to free block not in datazone [ 438.950786][T14195] Trying to free block not in datazone [ 438.951945][T14195] Trying to free block not in datazone [ 438.953127][T14195] minix_free_block (loop1:6): bit already cleared [ 438.954519][T14195] Trying to free block not in datazone [ 438.955688][T14195] Trying to free block not in datazone 00:07:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18680000010000000000000008000000851000000000000005c7000480000000180000000700000000000000080000008500000024000000a498f4ffffffffff186200001000000000000000faffffff18220000", @ANYRES32=r0, @ANYBLOB="000000008207000048137f20c8ffff7fa3b01b07000000d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:19 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) io_setup(0x6, &(0x7f0000000140)) io_getevents(r0, 0x8, 0x800000000000184, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)) 00:07:19 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000, 0x0) 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1ffee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:19 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000, 0x0) [ 439.055464][T14208] loop3: detected capacity change from 0 to 64 [ 439.086633][T14208] Trying to free block not in datazone [ 439.088023][T14208] Trying to free block not in datazone [ 439.096018][T14208] Trying to free block not in datazone [ 439.097308][T14208] Trying to free block not in datazone 00:07:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18680000010000000000000008000000851000000000000005c7000480000000180000000700000000000000080000008500000024000000a498f4ffffffffff186200001000000000000000faffffff18220000", @ANYRES32=r0, @ANYBLOB="000000008207000048137f20c8ffff7fa3b01b07000000d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 439.104027][T14213] loop1: detected capacity change from 0 to 64 [ 439.106552][T14208] minix_free_block (loop3:6): bit already cleared [ 439.107934][T14208] Trying to free block not in datazone 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 439.115412][T14208] Trying to free block not in datazone [ 439.121217][T14213] Trying to free block not in datazone [ 439.122443][T14213] Trying to free block not in datazone [ 439.131945][T14213] Trying to free block not in datazone [ 439.133235][T14213] Trying to free block not in datazone 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20002}], 0x1, 0x1000012, 0x0, 0x0) [ 439.142550][T14213] minix_free_block (loop1:6): bit already cleared [ 439.144110][T14213] Trying to free block not in datazone 00:07:19 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x80000, 0x0) [ 439.158574][T14213] Trying to free block not in datazone 00:07:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$eJzs3TFrU10cBvB/3/bVUJBkEIoieMXFKTQV9xSpIAYUJYNOFpuiNLFgIKBDq5NfQr+Cjq6Cg7j6BUSQKrjYrYMQqTc0tqQmUtMbzO+35IF7npxz7pBLhpzcPtVYWVptLm9ubkQuNxFT5SjH1kQU4r+YjNTjAAD+JVvtdnxrp7JeCwBwODz/AWD8DPj8v3aISwIAhsz3fwAYPzdu3royX6ksXE+SXETjaavaqqav6fX55bgX9ajFbOTje0R7R5ovXa4szCbbPhei2ljv9Ndb1cnd/VLko9C7X0pSu/v/x3Sn/2E6ajEX+Tjeuz/Xs38kzp39Zf5i5OP9nViNeizFdrfbXyslycWrlT39oz/HAQAAAAAAAAAAAAAAAAAAAADAMBSTHT3P7ykW97ue9gc/H2jv+TxTcXIq270DAAAAAAAAAAAAAAAAAADAqGg+fLSyWK/XHvwu3H/34k2/MQOGic68B32fg4djZz4923/Mkz+5P383vD6d5W0ZMLzduHvifHPmwqisp1/4mo8Y0hQvR2KDfcPM8/Liq7WPXwZtZfihBAAAAAAAAAAAAAAAAAAAY6r7o9+sVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2en+///wQtZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHwEAAP//DhmnqA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103) open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400) 00:07:19 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000, 0x0) [ 439.223352][T14220] loop3: detected capacity change from 0 to 64 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 439.239790][T14220] Trying to free block not in datazone [ 439.241037][T14220] Trying to free block not in datazone [ 439.242257][T14220] Trying to free block not in datazone [ 439.252218][T14224] loop1: detected capacity change from 0 to 64 [ 439.252220][T14225] loop2: detected capacity change from 0 to 256 [ 439.256919][T14220] Trying to free block not in datazone [ 439.258211][T14220] minix_free_block (loop3:6): bit already cleared [ 439.259744][T14220] Trying to free block not in datazone 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20003}], 0x1, 0x1000012, 0x0, 0x0) 00:07:19 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) (async) io_setup(0x6, &(0x7f0000000140)) (async) io_getevents(r0, 0x8, 0x800000000000184, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)) [ 439.278490][T14224] Trying to free block not in datazone [ 439.279878][T14224] Trying to free block not in datazone [ 439.285298][T14220] Trying to free block not in datazone [ 439.287935][T14224] Trying to free block not in datazone [ 439.289191][T14224] Trying to free block not in datazone [ 439.298052][T14224] minix_free_block (loop1:6): bit already cleared [ 439.313172][T14224] Trying to free block not in datazone [ 439.314426][T14224] Trying to free block not in datazone 00:07:19 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc0000, 0x0) 00:07:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103) (async, rerun: 32) open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400) 00:07:19 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4100, 0x0) [ 439.368152][T14237] loop3: detected capacity change from 0 to 64 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20004}], 0x1, 0x1000012, 0x0, 0x0) [ 439.399787][T14237] Trying to free block not in datazone [ 439.410268][T14237] Trying to free block not in datazone [ 439.417166][T14237] Trying to free block not in datazone [ 439.425462][T14237] Trying to free block not in datazone [ 439.433415][T14237] minix_free_block (loop3:6): bit already cleared [ 439.438970][T14242] loop1: detected capacity change from 0 to 64 [ 439.441506][T14237] Trying to free block not in datazone [ 439.447614][T14237] Trying to free block not in datazone [ 439.457004][T14244] loop2: detected capacity change from 0 to 256 [ 439.460248][T14242] Trying to free block not in datazone [ 439.466453][T14242] Trying to free block not in datazone [ 439.469630][T14242] Trying to free block not in datazone 00:07:19 executing program 5: io_setup(0x9, &(0x7f0000000280)) (async) io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_destroy(r0) (async) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) io_setup(0x6, &(0x7f0000000140)) io_getevents(r0, 0x8, 0x800000000000184, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)) [ 439.475770][T14242] Trying to free block not in datazone [ 439.480642][T14242] minix_free_block (loop1:6): bit already cleared [ 439.484468][T14242] Trying to free block not in datazone 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 439.499485][T14242] Trying to free block not in datazone 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20005}], 0x1, 0x1000012, 0x0, 0x0) 00:07:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103) open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$eJzs3TFrU10cBvB/3/bVUJBkEIoieMXFKTQV9xSpIAYUJYNOFpuiNLFgIKBDq5NfQr+Cjq6Cg7j6BUSQKrjYrYMQqTc0tqQmUtMbzO+35IF7npxz7pBLhpzcPtVYWVptLm9ubkQuNxFT5SjH1kQU4r+YjNTjAAD+JVvtdnxrp7JeCwBwODz/AWD8DPj8v3aISwIAhsz3fwAYPzdu3royX6ksXE+SXETjaavaqqav6fX55bgX9ajFbOTje0R7R5ovXa4szCbbPhei2ljv9Ndb1cnd/VLko9C7X0pSu/v/x3Sn/2E6ajEX+Tjeuz/Xs38kzp39Zf5i5OP9nViNeizFdrfbXyslycWrlT39oz/HAQAAAAAAAAAAAAAAAAAAAADAMBSTHT3P7ykW97ue9gc/H2jv+TxTcXIq270DAAAAAAAAAAAAAAAAAADAqGg+fLSyWK/XHvwu3H/34k2/MQOGic68B32fg4djZz4923/Mkz+5P383vD6d5W0ZMLzduHvifHPmwqisp1/4mo8Y0hQvR2KDfcPM8/Liq7WPXwZtZfihBAAAAAAAAAAAAAAAAAAAY6r7o9+sVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2en+///wQtZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHwEAAP//DhmnqA==") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103) (async) open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0) (async) fcntl$setlease(r0, 0x400, 0x1) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400) (async) 00:07:19 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x7001, 0x0) 00:07:19 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x100000, 0x0) [ 439.583784][T14256] loop3: detected capacity change from 0 to 64 [ 439.616338][T14256] Trying to free block not in datazone [ 439.633438][T14256] Trying to free block not in datazone [ 439.634691][T14256] Trying to free block not in datazone [ 439.635927][T14256] Trying to free block not in datazone [ 439.640063][T14256] minix_free_block (loop3:6): bit already cleared 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:19 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}]) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) [ 439.652293][T14256] Trying to free block not in datazone [ 439.653524][T14256] Trying to free block not in datazone [ 439.670081][T14262] loop1: detected capacity change from 0 to 64 [ 439.674308][T14263] loop2: detected capacity change from 0 to 256 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20006}], 0x1, 0x1000012, 0x0, 0x0) [ 439.702873][T14262] Trying to free block not in datazone 00:07:19 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x200001, 0x0) [ 439.715383][T14262] Trying to free block not in datazone [ 439.728316][T14262] Trying to free block not in datazone 00:07:19 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r2 = fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) (async) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}]) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 439.770297][T14262] Trying to free block not in datazone [ 439.771503][T14262] minix_free_block (loop1:6): bit already cleared [ 439.772861][T14262] Trying to free block not in datazone [ 439.774011][T14262] Trying to free block not in datazone [ 439.801195][T14288] loop3: detected capacity change from 0 to 64 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20007}], 0x1, 0x1000012, 0x0, 0x0) 00:07:19 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f, 0x0) 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 439.853067][T14288] Trying to free block not in datazone [ 439.854378][T14288] Trying to free block not in datazone 00:07:19 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 439.860721][T14288] Trying to free block not in datazone [ 439.861989][T14288] Trying to free block not in datazone 00:07:19 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}]) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) dup(r3) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) dup(r6) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}]) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) (async) [ 439.905834][T14288] Trying to free block not in datazone [ 439.906905][T14295] loop1: detected capacity change from 0 to 64 [ 439.907110][T14288] Trying to free block not in datazone [ 439.945981][T14295] Trying to free block not in datazone [ 439.947354][T14295] Trying to free block not in datazone [ 439.948628][T14295] Trying to free block not in datazone [ 439.961215][T14295] Trying to free block not in datazone 00:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20008}], 0x1, 0x1000012, 0x0, 0x0) 00:07:19 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x300001, 0x0) [ 439.969460][T14295] minix_free_block (loop1:6): bit already cleared [ 439.970878][T14295] Trying to free block not in datazone [ 439.979461][T14295] Trying to free block not in datazone 00:07:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:20 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x399d3, 0x0) [ 440.041237][T14313] loop3: detected capacity change from 0 to 64 00:07:20 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600001) io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000140)="ec911947c3191fd11b3353d5f1307c2c8054f6e3425d9d23d42757af79f83730b075738d4322cb653fc40b19de762173fc4890b99e7aa6f90caa80c6458d7a4a111fe4933fbb095027aeb56fe5f917a3847cd588af0a5af51ed18563b34d2dc4086864cfe1ee9840680d3357f97c09d9d5e8ef9f483d9202e36874da27dbf936b57900c27b873d5078ad2620f1deffc390488febac691bdc8acc16480092b480f597fbb0314e8a9872683d0288427fa33c4efdb6a3faf8b0d0636464306693b9f71b81507a8667cc15a9dceb3bf528ea1c42ab5c2378d2d253653480f492ac", 0xdf, 0x1, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000240), 0x0, 0xafa}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2f, 0xffffffffffffffff, &(0x7f0000000300)="02e3c15541b8a227aa2b31f9c045709c0b1b8c22858e73f0359d71cf87c20ed392fc4aee5b4d0f0cd613704d50fb89494cc62648e332e1a6a49b0be3fea8db81edaa141a625d2d831b7bb4de3d889e6feb5468098b818760daa08d52e065823a8e7b23e3f486b4346d74c51a3d193e4931276f79c9eb3dcd55683e346e4d66ec92d5416072226878e47b7432733630dbce0b0349e3", 0x95, 0x6, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xbe, 0xffffffffffffffff, &(0x7f0000000400)="50464d76e9235f04f83f8a4d39c6e955c280c0e0479941ec641d0e481b69a168acd4d9e22039382cc36e665aaa5e3cf73a490a2b08fe8565f1b363519b60237e4cb5799ca216ec1adc1a72ee4f209a987400d5c77b58b8", 0x57, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0xffffffffffffffff, &(0x7f00000004c0)="f7d7bd56c024c86f014aa709c2b9f70e1e1162f317cbfdc175c188be4fe3fd659e79297015c71ce4f0b40096d56733a51fa860ca0e643fc86ae3ebc27cf1975feb78e22eba1ebceda8a741a2a460699caf164862c2b0b6777e579ae71157b6c841b9c3e345032a0bb803aeb2625a816d0a0be49556babd69b290accd61ca5706749e56", 0x83, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x1ff, 0xffffffffffffffff, &(0x7f00000005c0)="a1ee8bfd257322ec58839c55bb60700c1b5e913d", 0x14, 0x8000, 0x0, 0x2}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x0}, 0x0) [ 440.063580][T14300] Injecting memory failure for pfn 0x180e95 at process virtual address 0x20495000 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20009}], 0x1, 0x1000012, 0x0, 0x0) [ 440.096883][T14317] loop1: detected capacity change from 0 to 64 [ 440.098353][T14313] Trying to free block not in datazone [ 440.112924][T14313] Trying to free block not in datazone [ 440.114147][T14313] Trying to free block not in datazone [ 440.121049][T14313] Trying to free block not in datazone [ 440.122190][T14313] minix_free_block (loop3:6): bit already cleared [ 440.122953][T14317] Trying to free block not in datazone [ 440.123524][T14313] Trying to free block not in datazone [ 440.125958][T14313] Trying to free block not in datazone 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 440.131385][T14317] Trying to free block not in datazone [ 440.140063][T14317] Trying to free block not in datazone [ 440.145016][T14317] Trying to free block not in datazone [ 440.148756][T14317] minix_free_block (loop1:6): bit already cleared [ 440.150026][T14300] Memory failure: 0x180e95: recovery action for dirty LRU page: Recovered [ 440.152169][T14300] Injecting memory failure for pfn 0x17fa95 at process virtual address 0x20695000 [ 440.155003][T14317] Trying to free block not in datazone [ 440.158731][T14317] Trying to free block not in datazone 00:07:20 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x399e0, 0x0) 00:07:20 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1000000, 0x0) 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000a}], 0x1, 0x1000012, 0x0, 0x0) [ 440.242978][T14300] Memory failure: 0x17fa95: recovery action for dirty LRU page: Recovered [ 440.267469][T14331] loop1: detected capacity change from 0 to 64 [ 440.270222][T14300] Injecting memory failure for pfn 0x180e60 at process virtual address 0x20460000 [ 440.278622][T14300] Memory failure: 0x180e60: recovery action for dirty LRU page: Recovered [ 440.290826][T14300] Injecting memory failure for pfn 0x180e61 at process virtual address 0x20461000 [ 440.296865][T14333] loop3: detected capacity change from 0 to 64 [ 440.301288][T14300] Memory failure: 0x180e61: recovery action for dirty LRU page: Recovered [ 440.301629][T14331] Trying to free block not in datazone [ 440.304188][T14331] Trying to free block not in datazone [ 440.305324][T14331] Trying to free block not in datazone [ 440.306430][T14331] Trying to free block not in datazone [ 440.307500][T14331] minix_free_block (loop1:6): bit already cleared [ 440.308810][T14331] Trying to free block not in datazone [ 440.325661][T14333] Trying to free block not in datazone [ 440.326971][T14333] Trying to free block not in datazone [ 440.328424][T14333] Trying to free block not in datazone [ 440.337972][T14333] Trying to free block not in datazone 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000b}], 0x1, 0x1000012, 0x0, 0x0) 00:07:20 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600001) io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000140)="ec911947c3191fd11b3353d5f1307c2c8054f6e3425d9d23d42757af79f83730b075738d4322cb653fc40b19de762173fc4890b99e7aa6f90caa80c6458d7a4a111fe4933fbb095027aeb56fe5f917a3847cd588af0a5af51ed18563b34d2dc4086864cfe1ee9840680d3357f97c09d9d5e8ef9f483d9202e36874da27dbf936b57900c27b873d5078ad2620f1deffc390488febac691bdc8acc16480092b480f597fbb0314e8a9872683d0288427fa33c4efdb6a3faf8b0d0636464306693b9f71b81507a8667cc15a9dceb3bf528ea1c42ab5c2378d2d253653480f492ac", 0xdf, 0x1, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000240), 0x0, 0xafa}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2f, 0xffffffffffffffff, &(0x7f0000000300)="02e3c15541b8a227aa2b31f9c045709c0b1b8c22858e73f0359d71cf87c20ed392fc4aee5b4d0f0cd613704d50fb89494cc62648e332e1a6a49b0be3fea8db81edaa141a625d2d831b7bb4de3d889e6feb5468098b818760daa08d52e065823a8e7b23e3f486b4346d74c51a3d193e4931276f79c9eb3dcd55683e346e4d66ec92d5416072226878e47b7432733630dbce0b0349e3", 0x95, 0x6, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xbe, 0xffffffffffffffff, &(0x7f0000000400)="50464d76e9235f04f83f8a4d39c6e955c280c0e0479941ec641d0e481b69a168acd4d9e22039382cc36e665aaa5e3cf73a490a2b08fe8565f1b363519b60237e4cb5799ca216ec1adc1a72ee4f209a987400d5c77b58b8", 0x57, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0xffffffffffffffff, &(0x7f00000004c0)="f7d7bd56c024c86f014aa709c2b9f70e1e1162f317cbfdc175c188be4fe3fd659e79297015c71ce4f0b40096d56733a51fa860ca0e643fc86ae3ebc27cf1975feb78e22eba1ebceda8a741a2a460699caf164862c2b0b6777e579ae71157b6c841b9c3e345032a0bb803aeb2625a816d0a0be49556babd69b290accd61ca5706749e56", 0x83, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x1ff, 0xffffffffffffffff, &(0x7f00000005c0)="a1ee8bfd257322ec58839c55bb60700c1b5e913d", 0x14, 0x8000, 0x0, 0x2}]) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x0}, 0x0) 00:07:20 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) (async) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) (async) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 440.357531][T14333] minix_free_block (loop3:6): bit already cleared [ 440.364785][T14333] Trying to free block not in datazone [ 440.367725][T14331] Trying to free block not in datazone [ 440.375078][T14333] Trying to free block not in datazone 00:07:20 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000, 0x0) 00:07:20 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1002000, 0x0) 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000c}], 0x1, 0x1000012, 0x0, 0x0) 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 440.465166][T14348] loop1: detected capacity change from 0 to 64 [ 440.483293][T14348] Trying to free block not in datazone [ 440.486979][T14348] Trying to free block not in datazone [ 440.491006][T14352] loop3: detected capacity change from 0 to 64 [ 440.493608][T14348] Trying to free block not in datazone [ 440.495338][T14348] Trying to free block not in datazone [ 440.497746][T14348] minix_free_block (loop1:6): bit already cleared [ 440.502563][T14348] Trying to free block not in datazone [ 440.504609][T14348] Trying to free block not in datazone 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000d}], 0x1, 0x1000012, 0x0, 0x0) 00:07:20 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x3, &(0x7f0000000000)=0x0) (async) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600001) io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000140)="ec911947c3191fd11b3353d5f1307c2c8054f6e3425d9d23d42757af79f83730b075738d4322cb653fc40b19de762173fc4890b99e7aa6f90caa80c6458d7a4a111fe4933fbb095027aeb56fe5f917a3847cd588af0a5af51ed18563b34d2dc4086864cfe1ee9840680d3357f97c09d9d5e8ef9f483d9202e36874da27dbf936b57900c27b873d5078ad2620f1deffc390488febac691bdc8acc16480092b480f597fbb0314e8a9872683d0288427fa33c4efdb6a3faf8b0d0636464306693b9f71b81507a8667cc15a9dceb3bf528ea1c42ab5c2378d2d253653480f492ac", 0xdf, 0x1, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000240), 0x0, 0xafa}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2f, 0xffffffffffffffff, &(0x7f0000000300)="02e3c15541b8a227aa2b31f9c045709c0b1b8c22858e73f0359d71cf87c20ed392fc4aee5b4d0f0cd613704d50fb89494cc62648e332e1a6a49b0be3fea8db81edaa141a625d2d831b7bb4de3d889e6feb5468098b818760daa08d52e065823a8e7b23e3f486b4346d74c51a3d193e4931276f79c9eb3dcd55683e346e4d66ec92d5416072226878e47b7432733630dbce0b0349e3", 0x95, 0x6, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xbe, 0xffffffffffffffff, &(0x7f0000000400)="50464d76e9235f04f83f8a4d39c6e955c280c0e0479941ec641d0e481b69a168acd4d9e22039382cc36e665aaa5e3cf73a490a2b08fe8565f1b363519b60237e4cb5799ca216ec1adc1a72ee4f209a987400d5c77b58b8", 0x57, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0xffffffffffffffff, &(0x7f00000004c0)="f7d7bd56c024c86f014aa709c2b9f70e1e1162f317cbfdc175c188be4fe3fd659e79297015c71ce4f0b40096d56733a51fa860ca0e643fc86ae3ebc27cf1975feb78e22eba1ebceda8a741a2a460699caf164862c2b0b6777e579ae71157b6c841b9c3e345032a0bb803aeb2625a816d0a0be49556babd69b290accd61ca5706749e56", 0x83, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x1ff, 0xffffffffffffffff, &(0x7f00000005c0)="a1ee8bfd257322ec58839c55bb60700c1b5e913d", 0x14, 0x8000, 0x0, 0x2}]) (async, rerun: 64) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x0}, 0x0) (rerun: 64) [ 440.527551][T14352] Trying to free block not in datazone 00:07:20 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x80000, 0x0) [ 440.536683][T14352] Trying to free block not in datazone [ 440.548200][T14352] Trying to free block not in datazone [ 440.570168][T14352] Trying to free block not in datazone [ 440.571391][T14352] minix_free_block (loop3:6): bit already cleared [ 440.572801][T14352] Trying to free block not in datazone 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 440.613040][T14352] Trying to free block not in datazone [ 440.615642][T14362] loop1: detected capacity change from 0 to 64 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000e}], 0x1, 0x1000012, 0x0, 0x0) 00:07:20 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1003000, 0x0) [ 440.645557][T14362] Trying to free block not in datazone [ 440.646839][T14362] Trying to free block not in datazone [ 440.648108][T14362] Trying to free block not in datazone 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 440.658760][T14362] Trying to free block not in datazone [ 440.661389][T14362] minix_free_block (loop1:6): bit already cleared [ 440.662780][T14362] Trying to free block not in datazone [ 440.664037][T14362] Trying to free block not in datazone [ 440.713004][T14369] loop3: detected capacity change from 0 to 64 [ 440.735199][T14369] Trying to free block not in datazone [ 440.736480][T14369] Trying to free block not in datazone [ 440.737779][T14369] Trying to free block not in datazone [ 440.739033][T14369] Trying to free block not in datazone [ 440.750109][T14369] minix_free_block (loop3:6): bit already cleared [ 440.751557][T14369] Trying to free block not in datazone [ 440.752770][T14369] Trying to free block not in datazone 00:07:20 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) (async) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:20 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_destroy(r1) 00:07:20 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc0000, 0x0) 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000f}], 0x1, 0x1000012, 0x0, 0x0) 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:20 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000000, 0x0) [ 440.808119][T14379] loop1: detected capacity change from 0 to 64 [ 440.824693][T14379] Trying to free block not in datazone [ 440.826002][T14379] Trying to free block not in datazone [ 440.827243][T14379] Trying to free block not in datazone [ 440.835345][T14384] loop3: detected capacity change from 0 to 64 [ 440.837823][T14379] Trying to free block not in datazone [ 440.839069][T14379] minix_free_block (loop1:6): bit already cleared 00:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20010}], 0x1, 0x1000012, 0x0, 0x0) [ 440.849596][T14379] Trying to free block not in datazone [ 440.852209][T14379] Trying to free block not in datazone [ 440.854316][T14384] Trying to free block not in datazone [ 440.858962][T14384] Trying to free block not in datazone 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 440.871126][T14384] Trying to free block not in datazone [ 440.872390][T14384] Trying to free block not in datazone [ 440.873651][T14384] minix_free_block (loop3:6): bit already cleared [ 440.883995][T14384] Trying to free block not in datazone [ 440.885297][T14384] Trying to free block not in datazone 00:07:20 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x100000, 0x0) 00:07:20 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_destroy(r1) 00:07:20 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2040000, 0x0) [ 440.941542][T14400] loop1: detected capacity change from 0 to 64 [ 440.946716][T14400] Trying to free block not in datazone [ 440.948039][T14400] Trying to free block not in datazone [ 440.949971][T14400] Trying to free block not in datazone [ 440.951310][T14400] Trying to free block not in datazone [ 440.952716][T14400] minix_free_block (loop1:6): bit already cleared [ 440.954246][T14400] Trying to free block not in datazone [ 440.955515][T14400] Trying to free block not in datazone 00:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 441.004997][T14402] loop3: detected capacity change from 0 to 64 [ 441.039930][T14402] Trying to free block not in datazone [ 441.045732][T14402] Trying to free block not in datazone 00:07:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20011}], 0x1, 0x1000012, 0x0, 0x0) 00:07:21 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x200001, 0x0) 00:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 441.049218][T14402] Trying to free block not in datazone [ 441.062296][T14402] Trying to free block not in datazone [ 441.064217][T14409] loop1: detected capacity change from 0 to 64 00:07:21 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x7f, &(0x7f0000000000)) (async) io_setup(0x7f, &(0x7f0000000000)=0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_destroy(r1) [ 441.087740][T14402] minix_free_block (loop3:6): bit already cleared [ 441.091988][T14402] Trying to free block not in datazone [ 441.093172][T14402] Trying to free block not in datazone [ 441.110067][T14409] Trying to free block not in datazone [ 441.111209][T14409] Trying to free block not in datazone 00:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20012}], 0x1, 0x1000012, 0x0, 0x0) [ 441.112310][T14409] Trying to free block not in datazone [ 441.117040][T14409] Trying to free block not in datazone [ 441.119772][T14409] minix_free_block (loop1:6): bit already cleared [ 441.121144][T14409] Trying to free block not in datazone [ 441.123490][T14409] Trying to free block not in datazone 00:07:21 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x3000000, 0x0) 00:07:21 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x300001, 0x0) 00:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 441.205839][T14424] loop3: detected capacity change from 0 to 64 [ 441.215511][T14425] loop1: detected capacity change from 0 to 64 [ 441.228195][T14424] Trying to free block not in datazone [ 441.229959][T14424] Trying to free block not in datazone [ 441.231210][T14424] Trying to free block not in datazone 00:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20013}], 0x1, 0x1000012, 0x0, 0x0) [ 441.242470][T14425] Trying to free block not in datazone [ 441.243746][T14425] Trying to free block not in datazone [ 441.245125][T14424] Trying to free block not in datazone [ 441.247592][T14425] Trying to free block not in datazone [ 441.250110][T14424] minix_free_block (loop3:6): bit already cleared [ 441.252776][T14425] Trying to free block not in datazone [ 441.255167][T14424] Trying to free block not in datazone [ 441.256493][T14425] minix_free_block (loop1:6): bit already cleared [ 441.259228][T14424] Trying to free block not in datazone [ 441.261060][T14425] Trying to free block not in datazone 00:07:21 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffc00}]) [ 441.278564][T14425] Trying to free block not in datazone 00:07:21 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000000, 0x0) [ 441.341634][T14435] loop3: detected capacity change from 0 to 64 [ 441.358346][T14435] Trying to free block not in datazone [ 441.365322][T14435] Trying to free block not in datazone [ 441.366501][T14435] Trying to free block not in datazone [ 441.367692][T14435] Trying to free block not in datazone [ 441.368925][T14435] minix_free_block (loop3:6): bit already cleared [ 441.372493][T14435] Trying to free block not in datazone [ 441.373638][T14435] Trying to free block not in datazone [ 441.378216][T14416] Injecting memory failure for pfn 0x181c95 at process virtual address 0x20495000 [ 441.419104][T14416] Memory failure: 0x181c95: recovery action for dirty LRU page: Recovered [ 441.421231][T14416] Injecting memory failure for pfn 0x189495 at process virtual address 0x20695000 [ 441.448903][T14416] Memory failure: 0x189495: recovery action for dirty LRU page: Recovered [ 441.507615][T14416] Injecting memory failure for pfn 0x181c60 at process virtual address 0x20460000 [ 441.517877][T14416] Memory failure: 0x181c60: recovery action for dirty LRU page: Recovered [ 441.519887][T14416] Injecting memory failure for pfn 0x181c61 at process virtual address 0x20461000 [ 441.534539][T14416] Memory failure: 0x181c61: recovery action for dirty LRU page: Recovered 00:07:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:21 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1000000, 0x0) 00:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20014}], 0x1, 0x1000012, 0x0, 0x0) 00:07:21 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x5000000, 0x0) 00:07:21 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async, rerun: 64) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async, rerun: 64) io_setup(0x4, &(0x7f0000000000)=0x0) pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffc00}]) [ 441.580538][T14444] loop3: detected capacity change from 0 to 64 [ 441.598933][T14446] loop1: detected capacity change from 0 to 64 [ 441.608241][T14444] Trying to free block not in datazone [ 441.609536][T14444] Trying to free block not in datazone [ 441.610840][T14444] Trying to free block not in datazone [ 441.611735][T14446] Trying to free block not in datazone [ 441.612016][T14444] Trying to free block not in datazone [ 441.612027][T14444] minix_free_block (loop3:6): bit already cleared [ 441.612044][T14444] Trying to free block not in datazone [ 441.612056][T14444] Trying to free block not in datazone [ 441.624648][T14446] Trying to free block not in datazone [ 441.627179][T14446] Trying to free block not in datazone [ 441.632658][T14446] Trying to free block not in datazone [ 441.635342][T14446] minix_free_block (loop1:6): bit already cleared [ 441.639227][T14446] Trying to free block not in datazone 00:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20015}], 0x1, 0x1000012, 0x0, 0x0) 00:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 441.644745][T14446] Trying to free block not in datazone 00:07:21 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1002000, 0x0) 00:07:21 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6000000, 0x0) 00:07:21 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)) (async) io_setup(0x4, &(0x7f0000000000)=0x0) pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffc00}]) 00:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 441.768037][T14463] loop1: detected capacity change from 0 to 64 [ 441.786261][T14463] Trying to free block not in datazone [ 441.787590][T14463] Trying to free block not in datazone [ 441.796269][T14463] Trying to free block not in datazone [ 441.797595][T14463] Trying to free block not in datazone [ 441.807202][T14463] minix_free_block (loop1:6): bit already cleared [ 441.811100][T14463] Trying to free block not in datazone [ 441.814658][T14463] Trying to free block not in datazone [ 441.824800][T14451] Injecting memory failure for pfn 0x17f695 at process virtual address 0x20495000 [ 441.847705][T14451] Memory failure: 0x17f695: recovery action for dirty LRU page: Recovered [ 441.849793][T14451] Injecting memory failure for pfn 0x182e95 at process virtual address 0x20695000 [ 441.874155][T14451] Memory failure: 0x182e95: recovery action for dirty LRU page: Recovered [ 441.914037][T14451] Injecting memory failure for pfn 0x17f660 at process virtual address 0x20460000 [ 441.919971][T14451] Memory failure: 0x17f660: recovery action for dirty LRU page: Recovered [ 441.921911][T14451] Injecting memory failure for pfn 0x17f661 at process virtual address 0x20461000 [ 441.936717][T14451] Memory failure: 0x17f661: recovery action for dirty LRU page: Recovered 00:07:21 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20016}], 0x1, 0x1000012, 0x0, 0x0) 00:07:21 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6040000, 0x0) 00:07:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:21 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1003000, 0x0) 00:07:21 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 442.001398][T14478] loop1: detected capacity change from 0 to 64 [ 442.008445][T14479] loop3: detected capacity change from 0 to 64 [ 442.036515][T14479] Trying to free block not in datazone [ 442.037906][T14479] Trying to free block not in datazone [ 442.039278][T14479] Trying to free block not in datazone [ 442.043414][T14478] Trying to free block not in datazone [ 442.044703][T14478] Trying to free block not in datazone [ 442.046031][T14478] Trying to free block not in datazone [ 442.047322][T14479] Trying to free block not in datazone [ 442.048624][T14478] Trying to free block not in datazone [ 442.059546][T14479] minix_free_block (loop3:6): bit already cleared 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20017}], 0x1, 0x1000012, 0x0, 0x0) [ 442.065530][T14478] minix_free_block (loop1:6): bit already cleared [ 442.069825][T14479] Trying to free block not in datazone 00:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 442.075466][T14478] Trying to free block not in datazone 00:07:22 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 442.085966][T14479] Trying to free block not in datazone [ 442.092919][T14478] Trying to free block not in datazone 00:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000000, 0x0) 00:07:22 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x7000000, 0x0) 00:07:22 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) [ 442.190755][T14495] loop1: detected capacity change from 0 to 64 [ 442.212959][T14495] Trying to free block not in datazone [ 442.214309][T14495] Trying to free block not in datazone [ 442.219925][T14495] Trying to free block not in datazone [ 442.221272][T14495] Trying to free block not in datazone [ 442.226245][T14495] minix_free_block (loop1:6): bit already cleared [ 442.227590][T14480] Injecting memory failure for pfn 0x185095 at process virtual address 0x20495000 [ 442.236965][T14495] Trying to free block not in datazone [ 442.238289][T14495] Trying to free block not in datazone [ 442.246535][T14480] Memory failure: 0x185095: recovery action for dirty LRU page: Recovered [ 442.248478][T14480] Injecting memory failure for pfn 0x18a295 at process virtual address 0x20695000 [ 442.300776][T14480] Memory failure: 0x18a295: recovery action for dirty LRU page: Recovered [ 442.346013][T14480] Injecting memory failure for pfn 0x185060 at process virtual address 0x20460000 [ 442.357323][T14480] Memory failure: 0x185060: recovery action for dirty LRU page: Recovered [ 442.359142][T14480] Injecting memory failure for pfn 0x185061 at process virtual address 0x20461000 [ 442.367536][T14480] Memory failure: 0x185061: recovery action for dirty LRU page: Recovered 00:07:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20018}], 0x1, 0x1000012, 0x0, 0x0) 00:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:22 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x8000000, 0x0) 00:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2040000, 0x0) 00:07:22 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c) [ 442.408997][T14509] loop3: detected capacity change from 0 to 64 [ 442.429956][T14508] loop1: detected capacity change from 0 to 64 [ 442.446818][T14508] Trying to free block not in datazone [ 442.448158][T14508] Trying to free block not in datazone [ 442.450210][T14509] Trying to free block not in datazone [ 442.451530][T14509] Trying to free block not in datazone 00:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20019}], 0x1, 0x1000012, 0x0, 0x0) [ 442.459605][T14509] Trying to free block not in datazone [ 442.461112][T14508] Trying to free block not in datazone [ 442.462560][T14508] Trying to free block not in datazone [ 442.463870][T14508] minix_free_block (loop1:6): bit already cleared [ 442.465317][T14508] Trying to free block not in datazone [ 442.466635][T14509] Trying to free block not in datazone [ 442.467943][T14509] minix_free_block (loop3:6): bit already cleared [ 442.469687][T14509] Trying to free block not in datazone [ 442.479459][T14508] Trying to free block not in datazone [ 442.481447][T14509] Trying to free block not in datazone 00:07:22 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c) 00:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x3000000, 0x0) 00:07:22 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc000000, 0x0) 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001a}], 0x1, 0x1000012, 0x0, 0x0) [ 442.591661][T14524] loop1: detected capacity change from 0 to 64 [ 442.598661][T14526] loop3: detected capacity change from 0 to 64 [ 442.616826][T14524] Trying to free block not in datazone [ 442.618176][T14524] Trying to free block not in datazone [ 442.619668][T14524] Trying to free block not in datazone [ 442.628938][T14526] Trying to free block not in datazone [ 442.630754][T14524] Trying to free block not in datazone [ 442.632078][T14524] minix_free_block (loop1:6): bit already cleared [ 442.633540][T14524] Trying to free block not in datazone [ 442.634765][T14524] Trying to free block not in datazone [ 442.635964][T14526] Trying to free block not in datazone [ 442.637507][T14526] Trying to free block not in datazone [ 442.638675][T14526] Trying to free block not in datazone [ 442.648735][T14526] minix_free_block (loop3:6): bit already cleared [ 442.657127][T14514] Injecting memory failure for pfn 0x188895 at process virtual address 0x20495000 [ 442.657332][T14526] Trying to free block not in datazone [ 442.668622][T14526] Trying to free block not in datazone [ 442.688013][T14514] Memory failure: 0x188895: recovery action for dirty LRU page: Recovered [ 442.699880][T14514] Injecting memory failure for pfn 0x18a695 at process virtual address 0x20695000 [ 442.720003][T14527] Injecting memory failure for pfn 0x188860 at process virtual address 0x20460000 [ 442.726326][T14527] Memory failure: 0x188860: recovery action for dirty LRU page: Recovered [ 442.738691][T14527] Injecting memory failure for pfn 0x188861 at process virtual address 0x20461000 [ 442.749479][T14514] Memory failure: 0x18a695: recovery action for dirty LRU page: Recovered [ 442.756516][T14527] Memory failure: 0x188861: recovery action for dirty LRU page: Recovered 00:07:22 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) 00:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:22 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10) (async) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c) (async) 00:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000000, 0x0) 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001b}], 0x1, 0x1000012, 0x0, 0x0) 00:07:22 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe000000, 0x0) [ 442.792551][T14538] loop1: detected capacity change from 0 to 64 [ 442.815601][T14538] Trying to free block not in datazone [ 442.819250][T14538] Trying to free block not in datazone [ 442.823288][T14540] loop3: detected capacity change from 0 to 64 [ 442.824172][T14538] Trying to free block not in datazone [ 442.836428][T14540] Trying to free block not in datazone [ 442.839007][T14538] Trying to free block not in datazone [ 442.840628][T14540] Trying to free block not in datazone [ 442.844130][T14540] Trying to free block not in datazone [ 442.844655][T14538] minix_free_block (loop1:6): bit already cleared [ 442.846790][T14538] Trying to free block not in datazone [ 442.848029][T14538] Trying to free block not in datazone [ 442.848799][T14540] Trying to free block not in datazone 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001c}], 0x1, 0x1000012, 0x0, 0x0) [ 442.856351][T14540] minix_free_block (loop3:6): bit already cleared [ 442.867923][T14540] Trying to free block not in datazone [ 442.883850][T14540] Trying to free block not in datazone 00:07:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:22 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x15100, 0x0) io_setup(0x80000000, &(0x7f0000000200)=0x0) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000000)="f76bf523ab4477dc11a849aafbb965c524e5243adc68a36541ec6a3b7a291dccf263ce80e2d3f2c79d321b4c9be959cd05540fce36b75b11a2d66a45ef8437647cb73c05fe6f9e56c828af256d0651db4038ab82bc5506", 0x57, 0x5, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000002c0)="044c9670d359c7b0c53dbd31c9fc3edbc2cc9fc44ee36498bac0f253151596381756087dea00f0801211325de94770036a67674f02713e280d4353dfe4add745706fb5ce991aa015f8d79804781b0c861a9f4f313d892ad13c231b21a22712bdf301e26ae33b98d93b9fc2dd36f7435c126f9af3449263b74931fb1c587d3c66da12e0d475f4b8d7e9147d973b7508542671c2b9ac0d4bca1e3bbf76733d2a36b8e5a42dc9ec9bbfdaf48ec803393b0e78e3aec8b350d8cf3006518d21a8b2eab94c417e463cfdf335d5ab66a4a2b9f62846df418652bf5d38", 0xd9, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7fffffffffffffff}]) 00:07:22 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf000000, 0x0) 00:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6000000, 0x0) 00:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001d}], 0x1, 0x1000012, 0x0, 0x0) [ 442.992497][T14559] loop3: detected capacity change from 0 to 64 [ 443.005014][T14560] loop1: detected capacity change from 0 to 64 [ 443.009240][T14559] Trying to free block not in datazone [ 443.016684][T14559] Trying to free block not in datazone [ 443.025798][T14559] Trying to free block not in datazone [ 443.027104][T14559] Trying to free block not in datazone [ 443.027926][T14560] Trying to free block not in datazone [ 443.029817][T14560] Trying to free block not in datazone [ 443.031809][T14560] Trying to free block not in datazone [ 443.033082][T14559] minix_free_block (loop3:6): bit already cleared [ 443.034792][T14543] Injecting memory failure for pfn 0x1ba095 at process virtual address 0x20495000 [ 443.038006][T14559] Trying to free block not in datazone [ 443.039468][T14560] Trying to free block not in datazone [ 443.039486][T14560] minix_free_block (loop1:6): bit already cleared [ 443.039504][T14560] Trying to free block not in datazone [ 443.039521][T14560] Trying to free block not in datazone [ 443.060436][T14559] Trying to free block not in datazone [ 443.067332][T14543] Memory failure: 0x1ba095: recovery action for dirty LRU page: Recovered [ 443.094565][T14561] Injecting memory failure for pfn 0x1ba060 at process virtual address 0x20460000 [ 443.096556][T14543] Injecting memory failure for pfn 0x1ba295 at process virtual address 0x20695000 [ 443.127590][T14543] Memory failure: 0x1ba295: recovery action for dirty LRU page: Recovered [ 443.131734][T14561] Memory failure: 0x1ba060: recovery action for dirty LRU page: Recovered [ 443.133771][T14561] Injecting memory failure for pfn 0x1ba061 at process virtual address 0x20461000 [ 443.135915][T14561] Memory failure: 0x1ba061: recovery action for dirty LRU page: Recovered 00:07:23 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:23 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x15100, 0x0) (async) io_setup(0x80000000, &(0x7f0000000200)=0x0) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000000)="f76bf523ab4477dc11a849aafbb965c524e5243adc68a36541ec6a3b7a291dccf263ce80e2d3f2c79d321b4c9be959cd05540fce36b75b11a2d66a45ef8437647cb73c05fe6f9e56c828af256d0651db4038ab82bc5506", 0x57, 0x5, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000002c0)="044c9670d359c7b0c53dbd31c9fc3edbc2cc9fc44ee36498bac0f253151596381756087dea00f0801211325de94770036a67674f02713e280d4353dfe4add745706fb5ce991aa015f8d79804781b0c861a9f4f313d892ad13c231b21a22712bdf301e26ae33b98d93b9fc2dd36f7435c126f9af3449263b74931fb1c587d3c66da12e0d475f4b8d7e9147d973b7508542671c2b9ac0d4bca1e3bbf76733d2a36b8e5a42dc9ec9bbfdaf48ec803393b0e78e3aec8b350d8cf3006518d21a8b2eab94c417e463cfdf335d5ab66a4a2b9f62846df418652bf5d38", 0xd9, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7fffffffffffffff}]) 00:07:23 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6040000, 0x0) 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001e}], 0x1, 0x1000012, 0x0, 0x0) 00:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x11000000, 0x0) [ 443.189269][T14574] loop3: detected capacity change from 0 to 64 [ 443.198149][T14573] loop1: detected capacity change from 0 to 64 [ 443.209618][T14573] Trying to free block not in datazone [ 443.210130][T14574] Trying to free block not in datazone [ 443.210869][T14573] Trying to free block not in datazone [ 443.211970][T14574] Trying to free block not in datazone [ 443.211982][T14574] Trying to free block not in datazone [ 443.211989][T14574] Trying to free block not in datazone [ 443.211996][T14574] minix_free_block (loop3:6): bit already cleared [ 443.212013][T14574] Trying to free block not in datazone [ 443.219139][T14574] Trying to free block not in datazone [ 443.219441][T14573] Trying to free block not in datazone [ 443.229054][T14573] Trying to free block not in datazone [ 443.235576][T14573] minix_free_block (loop1:6): bit already cleared [ 443.240612][T14573] Trying to free block not in datazone [ 443.244945][T14573] Trying to free block not in datazone 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20021}], 0x1, 0x1000012, 0x0, 0x0) 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:23 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x8000000, 0x0) 00:07:23 executing program 5: io_setup(0x9, &(0x7f0000000280)) (async) io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x15100, 0x0) io_setup(0x80000000, &(0x7f0000000200)=0x0) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000000)="f76bf523ab4477dc11a849aafbb965c524e5243adc68a36541ec6a3b7a291dccf263ce80e2d3f2c79d321b4c9be959cd05540fce36b75b11a2d66a45ef8437647cb73c05fe6f9e56c828af256d0651db4038ab82bc5506", 0x57, 0x5, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000002c0)="044c9670d359c7b0c53dbd31c9fc3edbc2cc9fc44ee36498bac0f253151596381756087dea00f0801211325de94770036a67674f02713e280d4353dfe4add745706fb5ce991aa015f8d79804781b0c861a9f4f313d892ad13c231b21a22712bdf301e26ae33b98d93b9fc2dd36f7435c126f9af3449263b74931fb1c587d3c66da12e0d475f4b8d7e9147d973b7508542671c2b9ac0d4bca1e3bbf76733d2a36b8e5a42dc9ec9bbfdaf48ec803393b0e78e3aec8b350d8cf3006518d21a8b2eab94c417e463cfdf335d5ab66a4a2b9f62846df418652bf5d38", 0xd9, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7fffffffffffffff}]) 00:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x12000000, 0x0) [ 443.348246][T14583] Injecting memory failure for pfn 0x1ba695 at process virtual address 0x20495000 [ 443.353962][T14591] loop1: detected capacity change from 0 to 64 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20041}], 0x1, 0x1000012, 0x0, 0x0) [ 443.366356][T14597] loop3: detected capacity change from 0 to 64 [ 443.370420][T14591] Trying to free block not in datazone [ 443.381892][T14591] Trying to free block not in datazone [ 443.383128][T14591] Trying to free block not in datazone [ 443.384340][T14591] Trying to free block not in datazone [ 443.385640][T14591] minix_free_block (loop1:6): bit already cleared [ 443.387035][T14591] Trying to free block not in datazone [ 443.388298][T14591] Trying to free block not in datazone [ 443.396898][T14583] Memory failure: 0x1ba695: recovery action for dirty LRU page: Recovered [ 443.404674][T14597] Trying to free block not in datazone [ 443.406046][T14597] Trying to free block not in datazone [ 443.407448][T14597] Trying to free block not in datazone [ 443.414166][T14589] Injecting memory failure for pfn 0x1ba660 at process virtual address 0x20460000 [ 443.420452][T14597] Trying to free block not in datazone [ 443.421783][T14597] minix_free_block (loop3:6): bit already cleared [ 443.423313][T14597] Trying to free block not in datazone [ 443.426796][T14583] Injecting memory failure for pfn 0x1ba895 at process virtual address 0x20695000 [ 443.432746][T14589] Memory failure: 0x1ba660: recovery action for dirty LRU page: Recovered [ 443.437306][T14589] Injecting memory failure for pfn 0x1ba661 at process virtual address 0x20461000 [ 443.440237][T14597] Trying to free block not in datazone [ 443.507143][T14583] Memory failure: 0x1ba895: recovery action for dirty LRU page: Recovered [ 443.517714][T14589] Memory failure: 0x1ba661: recovery action for dirty LRU page: Recovered 00:07:23 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:23 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc000000, 0x0) 00:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x20000000, 0x0) 00:07:23 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x9e896000) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = dup(r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x0, &(0x7f0000000680)) r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r7, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r9 = dup(r8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000600)="794df3939191ff153fc840897ab4a72e98d3c7dbb2ff", 0x16}], 0x1, 0x9, 0x1) io_submit(r0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="5e50f29345c9e89e662af7245be66a62599832b5a2ee9029f7ae166c883706eb58be225ab866e65ab72e99e44228e3ee9420449e44fbda84432b63c4a2082f01be25c5163f78f15f1cf9913668cece595d6bab777cdf5c28a7b4fed38dac43932acf18", 0x63, 0x6, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3a89, r3, &(0x7f0000000140)="d2a4a4e465577a26db3182d30ed825e57f1c78f03f01774b4089671f8611f88fbe2392affcea0cc0c4d47562bc67f33876c061f872172402f4d64d49c9406dcbb408b80e3acf9e12ed1d0378f3dc9b0e0856e381110acd5a41cc66", 0x5b, 0x81, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="e2329cb974689eeaa81fa805427ea7f5d3f73f79f24d79472b8783fde2cb2df9cbb10b87b68d6bf1d8a92322347ceb25cef1f558ac1c30868a4f5899fd393721bb402eb0bd1ad6fa467ac29decba2c196e09892e5a9b80917b92a08b4e0e33f38ab1bb19fd56797ee41fd3b7cb6ebd8fa7eff318a85aca0fc192ae3176913efad1413289d229a1a54dab4de967c3198444bf6c87e62ddbf24c707ddf87e9dcc0f96ba20328c56cddae3b96b66b01ce78fe5acc50745f5c84bd76d086ac5a494c8ab8e0da6eadc9c7c79d9eade7e60872ff102ffc6047f9afe445538e5351", 0xde, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="1d10cfd8710c3e28539584465c1ecc558cae7a18457df1a6216a194cfe52f51dad9673917e47fce3dfc1b76e442b6994408a743a337f3719660f16f2a26ce9b26508c1e2a07d55277bf7c16d28d8000346bbffac5d6dbb9a273cc8b67b615d048ce250a6e629db868d410623f3390c81b7", 0x71, 0x3f, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="b9373a7be9a8776e8560042c6dee05c292ab1212bc8cfc50e12a101d824021e6ce0e3ab3d81fc79e82ca3efbd1b5d35be7669dbc1df6f512aaf35bb46ab83735e5d1c2bff91d197ff914ba4158ce016d9968f4f2881439bc546125eb9bc83a6ed25d272e3517c21c31ee00fefca0bc7ea775d9ea7d2329e363e17628cd74681b8282", 0x82, 0x3f, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, r7, &(0x7f0000000500)="b2bd0540ebec1b48d5c606fb5c25636e3cd862008c665a3ef44e5891bd8eb8acc3534bc83528d0fca974bbbc036181c9ef4609a058fbb8f9", 0x38, 0x129e, 0x0, 0x3, r9}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) io_destroy(0x0) 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20091}], 0x1, 0x1000012, 0x0, 0x0) [ 443.585328][T14611] loop1: detected capacity change from 0 to 64 [ 443.592099][T14610] loop3: detected capacity change from 0 to 64 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20110}], 0x1, 0x1000012, 0x0, 0x0) [ 443.620520][T14611] Trying to free block not in datazone [ 443.621825][T14611] Trying to free block not in datazone [ 443.623543][T14610] Trying to free block not in datazone [ 443.624861][T14610] Trying to free block not in datazone 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 443.626313][T14610] Trying to free block not in datazone [ 443.627736][T14611] Trying to free block not in datazone [ 443.629267][T14611] Trying to free block not in datazone [ 443.631081][T14610] Trying to free block not in datazone [ 443.633487][T14611] minix_free_block (loop1:6): bit already cleared [ 443.635058][T14610] minix_free_block (loop3:6): bit already cleared [ 443.639950][T14611] Trying to free block not in datazone [ 443.643529][T14610] Trying to free block not in datazone [ 443.645951][T14611] Trying to free block not in datazone [ 443.647278][T14610] Trying to free block not in datazone 00:07:23 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x9e896000) (async, rerun: 32) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = dup(r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) io_submit(r0, 0x0, &(0x7f0000000680)) (async) r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r7, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r9 = dup(r8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000600)="794df3939191ff153fc840897ab4a72e98d3c7dbb2ff", 0x16}], 0x1, 0x9, 0x1) (async) io_submit(r0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="5e50f29345c9e89e662af7245be66a62599832b5a2ee9029f7ae166c883706eb58be225ab866e65ab72e99e44228e3ee9420449e44fbda84432b63c4a2082f01be25c5163f78f15f1cf9913668cece595d6bab777cdf5c28a7b4fed38dac43932acf18", 0x63, 0x6, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3a89, r3, &(0x7f0000000140)="d2a4a4e465577a26db3182d30ed825e57f1c78f03f01774b4089671f8611f88fbe2392affcea0cc0c4d47562bc67f33876c061f872172402f4d64d49c9406dcbb408b80e3acf9e12ed1d0378f3dc9b0e0856e381110acd5a41cc66", 0x5b, 0x81, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="e2329cb974689eeaa81fa805427ea7f5d3f73f79f24d79472b8783fde2cb2df9cbb10b87b68d6bf1d8a92322347ceb25cef1f558ac1c30868a4f5899fd393721bb402eb0bd1ad6fa467ac29decba2c196e09892e5a9b80917b92a08b4e0e33f38ab1bb19fd56797ee41fd3b7cb6ebd8fa7eff318a85aca0fc192ae3176913efad1413289d229a1a54dab4de967c3198444bf6c87e62ddbf24c707ddf87e9dcc0f96ba20328c56cddae3b96b66b01ce78fe5acc50745f5c84bd76d086ac5a494c8ab8e0da6eadc9c7c79d9eade7e60872ff102ffc6047f9afe445538e5351", 0xde, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="1d10cfd8710c3e28539584465c1ecc558cae7a18457df1a6216a194cfe52f51dad9673917e47fce3dfc1b76e442b6994408a743a337f3719660f16f2a26ce9b26508c1e2a07d55277bf7c16d28d8000346bbffac5d6dbb9a273cc8b67b615d048ce250a6e629db868d410623f3390c81b7", 0x71, 0x3f, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="b9373a7be9a8776e8560042c6dee05c292ab1212bc8cfc50e12a101d824021e6ce0e3ab3d81fc79e82ca3efbd1b5d35be7669dbc1df6f512aaf35bb46ab83735e5d1c2bff91d197ff914ba4158ce016d9968f4f2881439bc546125eb9bc83a6ed25d272e3517c21c31ee00fefca0bc7ea775d9ea7d2329e363e17628cd74681b8282", 0x82, 0x3f, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, r7, &(0x7f0000000500)="b2bd0540ebec1b48d5c606fb5c25636e3cd862008c665a3ef44e5891bd8eb8acc3534bc83528d0fca974bbbc036181c9ef4609a058fbb8f9", 0x38, 0x129e, 0x0, 0x3, r9}]) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) r10 = socket$rxrpc(0x21, 0x2, 0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) io_destroy(0x0) 00:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000000, 0x0) 00:07:23 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe000000, 0x0) 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 443.744616][T14613] Injecting memory failure for pfn 0x181a95 at process virtual address 0x20495000 [ 443.778299][T14613] Memory failure: 0x181a95: recovery action for dirty LRU page: Recovered [ 443.782034][T14631] loop3: detected capacity change from 0 to 64 [ 443.784470][T14613] Injecting memory failure for pfn 0x1baa95 at process virtual address 0x20695000 [ 443.801385][T14632] loop1: detected capacity change from 0 to 64 [ 443.804123][T14631] Trying to free block not in datazone [ 443.805313][T14631] Trying to free block not in datazone [ 443.806396][T14631] Trying to free block not in datazone [ 443.807575][T14631] Trying to free block not in datazone [ 443.808693][T14631] minix_free_block (loop3:6): bit already cleared [ 443.813470][T14632] Trying to free block not in datazone [ 443.815001][T14632] Trying to free block not in datazone [ 443.817467][T14632] Trying to free block not in datazone [ 443.818835][T14632] Trying to free block not in datazone [ 443.820838][T14613] Memory failure: 0x1baa95: recovery action for dirty LRU page: Recovered [ 443.831204][T14632] minix_free_block (loop1:6): bit already cleared [ 443.835012][T14632] Trying to free block not in datazone [ 443.838653][T14632] Trying to free block not in datazone [ 443.841268][T14613] Injecting memory failure for pfn 0x181a60 at process virtual address 0x20460000 [ 443.843346][T14631] Trying to free block not in datazone [ 443.844494][T14631] Trying to free block not in datazone [ 443.847732][T14613] Memory failure: 0x181a60: recovery action for dirty LRU page: Recovered [ 443.856677][T14613] Injecting memory failure for pfn 0x181a61 at process virtual address 0x20461000 [ 443.863822][T14613] Memory failure: 0x181a61: recovery action for dirty LRU page: Recovered 00:07:23 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20204}], 0x1, 0x1000012, 0x0, 0x0) 00:07:23 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x9e896000) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = dup(r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) io_submit(r0, 0x0, &(0x7f0000000680)) r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r7, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r9 = dup(r8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000600)="794df3939191ff153fc840897ab4a72e98d3c7dbb2ff", 0x16}], 0x1, 0x9, 0x1) (async) io_submit(r0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="5e50f29345c9e89e662af7245be66a62599832b5a2ee9029f7ae166c883706eb58be225ab866e65ab72e99e44228e3ee9420449e44fbda84432b63c4a2082f01be25c5163f78f15f1cf9913668cece595d6bab777cdf5c28a7b4fed38dac43932acf18", 0x63, 0x6, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3a89, r3, &(0x7f0000000140)="d2a4a4e465577a26db3182d30ed825e57f1c78f03f01774b4089671f8611f88fbe2392affcea0cc0c4d47562bc67f33876c061f872172402f4d64d49c9406dcbb408b80e3acf9e12ed1d0378f3dc9b0e0856e381110acd5a41cc66", 0x5b, 0x81, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="e2329cb974689eeaa81fa805427ea7f5d3f73f79f24d79472b8783fde2cb2df9cbb10b87b68d6bf1d8a92322347ceb25cef1f558ac1c30868a4f5899fd393721bb402eb0bd1ad6fa467ac29decba2c196e09892e5a9b80917b92a08b4e0e33f38ab1bb19fd56797ee41fd3b7cb6ebd8fa7eff318a85aca0fc192ae3176913efad1413289d229a1a54dab4de967c3198444bf6c87e62ddbf24c707ddf87e9dcc0f96ba20328c56cddae3b96b66b01ce78fe5acc50745f5c84bd76d086ac5a494c8ab8e0da6eadc9c7c79d9eade7e60872ff102ffc6047f9afe445538e5351", 0xde, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="1d10cfd8710c3e28539584465c1ecc558cae7a18457df1a6216a194cfe52f51dad9673917e47fce3dfc1b76e442b6994408a743a337f3719660f16f2a26ce9b26508c1e2a07d55277bf7c16d28d8000346bbffac5d6dbb9a273cc8b67b615d048ce250a6e629db868d410623f3390c81b7", 0x71, 0x3f, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="b9373a7be9a8776e8560042c6dee05c292ab1212bc8cfc50e12a101d824021e6ce0e3ab3d81fc79e82ca3efbd1b5d35be7669dbc1df6f512aaf35bb46ab83735e5d1c2bff91d197ff914ba4158ce016d9968f4f2881439bc546125eb9bc83a6ed25d272e3517c21c31ee00fefca0bc7ea775d9ea7d2329e363e17628cd74681b8282", 0x82, 0x3f, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, r7, &(0x7f0000000500)="b2bd0540ebec1b48d5c606fb5c25636e3cd862008c665a3ef44e5891bd8eb8acc3534bc83528d0fca974bbbc036181c9ef4609a058fbb8f9", 0x38, 0x129e, 0x0, 0x3, r9}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) r10 = socket$rxrpc(0x21, 0x2, 0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) io_destroy(0x0) 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:23 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf000000, 0x0) 00:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x41000000, 0x0) [ 443.936121][T14645] loop1: detected capacity change from 0 to 64 [ 443.942741][T14643] loop3: detected capacity change from 0 to 64 [ 443.960066][T14643] Trying to free block not in datazone [ 443.961507][T14643] Trying to free block not in datazone [ 443.962884][T14643] Trying to free block not in datazone [ 443.979863][T14645] Trying to free block not in datazone 00:07:23 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20300}], 0x1, 0x1000012, 0x0, 0x0) [ 443.981219][T14645] Trying to free block not in datazone [ 443.982832][T14645] Trying to free block not in datazone [ 443.989790][T14643] Trying to free block not in datazone [ 443.990961][T14643] minix_free_block (loop3:6): bit already cleared [ 443.992219][T14643] Trying to free block not in datazone [ 443.993397][T14643] Trying to free block not in datazone [ 443.994972][T14645] Trying to free block not in datazone 00:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:23 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5f19, r1, &(0x7f0000000040)="4c43a27bd2cc1b88cf3fb8dab485583f6f49dafd2232a46d7a29afc054551c79744e7da54d7133d83d4cc3b58ef080ad2bc51c04c3ea29aad76fc531ac670d3c6eda77776b421c6f24e39a625c400e913eaf4ce705b859fcb7a77e0f5c74", 0x5e, 0x9, 0x0, 0x6}]) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) shutdown(r3, 0x0) [ 444.022466][T14645] minix_free_block (loop1:6): bit already cleared [ 444.023915][T14645] Trying to free block not in datazone [ 444.034754][T14645] Trying to free block not in datazone 00:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6f010000, 0x0) 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20402}], 0x1, 0x1000012, 0x0, 0x0) 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 444.163581][T14650] Injecting memory failure for pfn 0x1ba495 at process virtual address 0x20495000 [ 444.163853][T14666] loop3: detected capacity change from 0 to 64 [ 444.184856][T14666] Trying to free block not in datazone [ 444.189599][T14666] Trying to free block not in datazone [ 444.192639][T14666] Trying to free block not in datazone [ 444.195338][T14650] Memory failure: 0x1ba495: recovery action for dirty LRU page: Recovered [ 444.197412][T14650] Injecting memory failure for pfn 0x188e95 at process virtual address 0x20695000 [ 444.208975][T14666] Trying to free block not in datazone [ 444.211458][T14666] minix_free_block (loop3:6): bit already cleared [ 444.212851][T14666] Trying to free block not in datazone [ 444.214129][T14666] Trying to free block not in datazone [ 444.229072][T14660] Injecting memory failure for pfn 0x1ba460 at process virtual address 0x20460000 [ 444.233035][T14650] Memory failure: 0x188e95: recovery action for dirty LRU page: Recovered [ 444.235372][T14660] Memory failure: 0x1ba460: recovery action for dirty LRU page: Recovered [ 444.237277][T14660] Injecting memory failure for pfn 0x1ba461 at process virtual address 0x20461000 [ 444.251343][T14660] Memory failure: 0x1ba461: recovery action for dirty LRU page: Recovered 00:07:24 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5f19, r1, &(0x7f0000000040)="4c43a27bd2cc1b88cf3fb8dab485583f6f49dafd2232a46d7a29afc054551c79744e7da54d7133d83d4cc3b58ef080ad2bc51c04c3ea29aad76fc531ac670d3c6eda77776b421c6f24e39a625c400e913eaf4ce705b859fcb7a77e0f5c74", 0x5e, 0x9, 0x0, 0x6}]) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) shutdown(r3, 0x0) 00:07:24 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x11000000, 0x0) 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:24 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20406}], 0x1, 0x1000012, 0x0, 0x0) 00:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf5ffffff, 0x0) [ 444.287942][T14672] loop1: detected capacity change from 0 to 64 [ 444.311374][T14672] Trying to free block not in datazone [ 444.315048][T14672] Trying to free block not in datazone [ 444.318666][T14672] Trying to free block not in datazone [ 444.323584][T14672] Trying to free block not in datazone [ 444.326107][T14672] minix_free_block (loop1:6): bit already cleared [ 444.333169][T14672] Trying to free block not in datazone [ 444.336236][T14681] loop3: detected capacity change from 0 to 64 [ 444.342435][T14672] Trying to free block not in datazone 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20500}], 0x1, 0x1000012, 0x0, 0x0) 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 444.364689][T14681] Trying to free block not in datazone 00:07:24 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x12000000, 0x0) 00:07:24 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5f19, r1, &(0x7f0000000040)="4c43a27bd2cc1b88cf3fb8dab485583f6f49dafd2232a46d7a29afc054551c79744e7da54d7133d83d4cc3b58ef080ad2bc51c04c3ea29aad76fc531ac670d3c6eda77776b421c6f24e39a625c400e913eaf4ce705b859fcb7a77e0f5c74", 0x5e, 0x9, 0x0, 0x6}]) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) shutdown(r3, 0x0) [ 444.399806][T14681] Trying to free block not in datazone [ 444.419596][T14681] Trying to free block not in datazone [ 444.420827][T14681] Trying to free block not in datazone [ 444.421996][T14681] Trying to free block not in datazone [ 444.447416][T14681] Trying to free block not in datazone [ 444.452005][T14692] loop1: detected capacity change from 0 to 64 [ 444.468994][T14692] Trying to free block not in datazone [ 444.471663][T14692] Trying to free block not in datazone 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 444.473216][T14692] Trying to free block not in datazone [ 444.474677][T14692] Trying to free block not in datazone 00:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfbffffff, 0x0) [ 444.476010][T14692] minix_free_block (loop1:6): bit already cleared [ 444.477657][T14692] Trying to free block not in datazone [ 444.479181][T14692] Trying to free block not in datazone [ 444.485597][T14693] Injecting memory failure for pfn 0x1bae95 at process virtual address 0x20495000 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20600}], 0x1, 0x1000012, 0x0, 0x0) [ 444.507585][T14693] Memory failure: 0x1bae95: recovery action for dirty LRU page: Recovered 00:07:24 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x20000000, 0x0) [ 444.514394][T14693] Injecting memory failure for pfn 0x1bb095 at process virtual address 0x20695000 [ 444.534807][T14698] loop3: detected capacity change from 0 to 64 [ 444.562528][T14698] Trying to free block not in datazone [ 444.563969][T14698] Trying to free block not in datazone [ 444.565264][T14698] Trying to free block not in datazone [ 444.569729][T14698] Trying to free block not in datazone [ 444.574531][T14698] minix_free_block (loop3:6): bit already cleared [ 444.576313][T14680] Injecting memory failure for pfn 0x1bae60 at process virtual address 0x20460000 [ 444.580869][T14698] Trying to free block not in datazone [ 444.585022][T14698] Trying to free block not in datazone [ 444.594277][T14693] Memory failure: 0x1bb095: recovery action for dirty LRU page: Recovered 00:07:24 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x80000000, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 444.609900][T14680] Memory failure: 0x1bae60: recovery action for dirty LRU page: Recovered [ 444.612166][T14680] Injecting memory failure for pfn 0x1bae61 at process virtual address 0x20461000 00:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f0000, 0x0) [ 444.640647][T14704] loop1: detected capacity change from 0 to 64 [ 444.646955][T14680] Memory failure: 0x1bae61: recovery action for dirty LRU page: Recovered [ 444.662569][T14704] Trying to free block not in datazone [ 444.663898][T14704] Trying to free block not in datazone [ 444.665215][T14704] Trying to free block not in datazone [ 444.666475][T14704] Trying to free block not in datazone [ 444.667827][T14704] minix_free_block (loop1:6): bit already cleared [ 444.679448][T14704] Trying to free block not in datazone [ 444.680676][T14704] Trying to free block not in datazone 00:07:24 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20604}], 0x1, 0x1000012, 0x0, 0x0) [ 444.709464][T14712] loop3: detected capacity change from 0 to 64 00:07:24 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000000, 0x0) 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:24 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async, rerun: 64) io_setup(0x80000000, &(0x7f0000000000)) (async, rerun: 64) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 444.744682][T14712] Trying to free block not in datazone [ 444.746054][T14712] Trying to free block not in datazone [ 444.759533][T14712] Trying to free block not in datazone [ 444.760836][T14712] Trying to free block not in datazone [ 444.762108][T14712] minix_free_block (loop3:6): bit already cleared [ 444.773921][T14712] Trying to free block not in datazone [ 444.775215][T14712] Trying to free block not in datazone 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20700}], 0x1, 0x1000012, 0x0, 0x0) 00:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffff5, 0x0) [ 444.827945][T14724] loop1: detected capacity change from 0 to 64 00:07:24 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0x80000000, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_setup(0x80000000, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) [ 444.858064][T14724] Trying to free block not in datazone [ 444.862857][T14724] Trying to free block not in datazone [ 444.865412][T14724] Trying to free block not in datazone [ 444.867383][T14724] Trying to free block not in datazone 00:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 444.886659][T14724] minix_free_block (loop1:6): bit already cleared [ 444.893563][T14724] Trying to free block not in datazone [ 444.896222][T14729] loop3: detected capacity change from 0 to 64 00:07:24 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20900}], 0x1, 0x1000012, 0x0, 0x0) [ 444.908816][T14724] Trying to free block not in datazone [ 444.909197][T14729] Trying to free block not in datazone [ 444.911501][T14729] Trying to free block not in datazone [ 444.913956][T14729] Trying to free block not in datazone [ 444.916468][T14729] Trying to free block not in datazone [ 444.919010][T14729] minix_free_block (loop3:6): bit already cleared [ 444.930255][T14721] Injecting memory failure for pfn 0x188695 at process virtual address 0x20495000 [ 444.934753][T14729] Trying to free block not in datazone [ 444.938391][T14729] Trying to free block not in datazone 00:07:24 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x41000000, 0x0) [ 444.961690][T14721] Memory failure: 0x188695: recovery action for dirty LRU page: Recovered [ 444.967057][T14721] Injecting memory failure for pfn 0x1bb295 at process virtual address 0x20695000 00:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffffb, 0x0) [ 444.982021][T14727] Injecting memory failure for pfn 0x188660 at process virtual address 0x20460000 [ 444.991208][T14727] Memory failure: 0x188660: recovery action for dirty LRU page: Recovered [ 444.997512][T14727] Injecting memory failure for pfn 0x188661 at process virtual address 0x20461000 [ 445.019139][T14742] loop1: detected capacity change from 0 to 64 [ 445.037427][T14742] Trying to free block not in datazone [ 445.050726][T14742] Trying to free block not in datazone [ 445.051947][T14742] Trying to free block not in datazone [ 445.054515][T14721] Memory failure: 0x1bb295: recovery action for dirty LRU page: Recovered [ 445.066424][T14727] Memory failure: 0x188661: recovery action for dirty LRU page: Recovered [ 445.070565][T14744] loop3: detected capacity change from 0 to 64 [ 445.072992][T14742] Trying to free block not in datazone [ 445.074284][T14742] minix_free_block (loop1:6): bit already cleared [ 445.075660][T14742] Trying to free block not in datazone [ 445.077027][T14742] Trying to free block not in datazone [ 445.092300][T14744] Trying to free block not in datazone [ 445.093463][T14744] Trying to free block not in datazone [ 445.094620][T14744] Trying to free block not in datazone [ 445.095753][T14744] Trying to free block not in datazone [ 445.096855][T14744] minix_free_block (loop3:6): bit already cleared [ 445.098214][T14744] Trying to free block not in datazone [ 445.103432][T14744] Trying to free block not in datazone 00:07:25 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:25 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) io_setup(0x9, &(0x7f0000000240)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20a00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:25 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x70010000, 0x0) 00:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x2) 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20b00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 445.238236][T14755] Injecting memory failure for pfn 0x1bb495 at process virtual address 0x20495000 [ 445.240907][T14762] loop3: detected capacity change from 0 to 64 00:07:25 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xd3990300, 0x0) [ 445.261585][T14762] Trying to free block not in datazone [ 445.267585][T14762] Trying to free block not in datazone [ 445.271798][T14762] Trying to free block not in datazone [ 445.274472][T14762] Trying to free block not in datazone [ 445.275974][T14755] Memory failure: 0x1bb495: recovery action for dirty LRU page: Recovered [ 445.283532][T14755] Injecting memory failure for pfn 0x1bb695 at process virtual address 0x20695000 00:07:25 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) io_setup(0x9, &(0x7f0000000240)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) dup(r1) (async) io_setup(0x9, &(0x7f0000000240)) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) (async) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) (async) [ 445.291372][T14762] minix_free_block (loop3:6): bit already cleared 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20c00}], 0x1, 0x1000012, 0x0, 0x0) [ 445.296303][T14762] Trying to free block not in datazone [ 445.299970][T14762] Trying to free block not in datazone [ 445.301936][T14765] Injecting memory failure for pfn 0x1bb460 at process virtual address 0x20460000 [ 445.335367][T14770] loop1: detected capacity change from 0 to 64 [ 445.339679][T14755] Memory failure: 0x1bb695: recovery action for dirty LRU page: Recovered 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 445.344981][T14765] Memory failure: 0x1bb460: recovery action for dirty LRU page: Recovered [ 445.346848][T14765] Injecting memory failure for pfn 0x1bb461 at process virtual address 0x20461000 [ 445.358492][T14770] Trying to free block not in datazone [ 445.370473][T14770] Trying to free block not in datazone [ 445.371697][T14770] Trying to free block not in datazone [ 445.372842][T14770] Trying to free block not in datazone [ 445.374016][T14770] minix_free_block (loop1:6): bit already cleared [ 445.375387][T14770] Trying to free block not in datazone [ 445.376588][T14770] Trying to free block not in datazone [ 445.378917][T14765] Memory failure: 0x1bb461: recovery action for dirty LRU page: Recovered 00:07:25 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x3) 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20d00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:25 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe0990300, 0x0) [ 445.458879][T14783] loop3: detected capacity change from 0 to 64 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:25 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) io_setup(0x9, &(0x7f0000000240)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) dup(r1) (async) io_setup(0x9, &(0x7f0000000240)) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) (async) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) (async) [ 445.504830][T14783] Trying to free block not in datazone [ 445.506204][T14783] Trying to free block not in datazone [ 445.507417][T14783] Trying to free block not in datazone [ 445.508688][T14783] Trying to free block not in datazone [ 445.515683][T14789] loop1: detected capacity change from 0 to 64 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20e00}], 0x1, 0x1000012, 0x0, 0x0) [ 445.521776][T14783] minix_free_block (loop3:6): bit already cleared [ 445.523264][T14783] Trying to free block not in datazone [ 445.524538][T14783] Trying to free block not in datazone [ 445.561112][T14789] Trying to free block not in datazone [ 445.568001][T14789] Trying to free block not in datazone [ 445.569229][T14789] Trying to free block not in datazone 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 445.582381][T14789] Trying to free block not in datazone 00:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4) [ 445.587614][T14789] minix_free_block (loop1:6): bit already cleared [ 445.592811][T14789] Trying to free block not in datazone [ 445.594069][T14789] Trying to free block not in datazone [ 445.608707][T14787] Injecting memory failure for pfn 0x1bb895 at process virtual address 0x20495000 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20f00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:25 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf5ffffff, 0x0) [ 445.652585][T14810] loop3: detected capacity change from 0 to 64 [ 445.653838][T14787] Memory failure: 0x1bb895: recovery action for dirty LRU page: Recovered [ 445.656244][T14787] Injecting memory failure for pfn 0x1bba95 at process virtual address 0x20695000 [ 445.663920][T14795] Injecting memory failure for pfn 0x1bb860 at process virtual address 0x20460000 [ 445.671849][T14795] Memory failure: 0x1bb860: recovery action for dirty LRU page: Recovered [ 445.676003][T14795] Injecting memory failure for pfn 0x1bb861 at process virtual address 0x20461000 00:07:25 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x226080, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8118, 0x410000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x8004391) write(r2, &(0x7f0000000180)="4ef17249ff18aabd4ca55c65da72b13b1cf4c624e5d12cd11cf85de15701623929e78f52c67842b29d1dc80efe758a409038b455bfe983d35a7deb5215f1320f843f8b55ccb480b1ceebda6a8b4b830eda6f2381e15b88514a3629d85c589a575a54e66d762069fcff44b0c5ebfd796a9325cbde2ce236175ce0dc", 0x7b) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f00000002c0)="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", 0x1000, 0x0, 0x0, 0x0, r3}]) io_destroy(r0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 445.707439][T14810] Trying to free block not in datazone [ 445.708672][T14810] Trying to free block not in datazone [ 445.714617][T14810] Trying to free block not in datazone [ 445.720334][T14810] Trying to free block not in datazone [ 445.726117][T14810] minix_free_block (loop3:6): bit already cleared [ 445.732140][T14810] Trying to free block not in datazone [ 445.735368][T14816] loop1: detected capacity change from 0 to 64 [ 445.736854][T14810] Trying to free block not in datazone [ 445.739073][T14787] Memory failure: 0x1bba95: recovery action for dirty LRU page: Recovered [ 445.748697][T14795] Memory failure: 0x1bb861: recovery action for dirty LRU page: Recovered [ 445.748718][T14816] Trying to free block not in datazone [ 445.760061][T14816] Trying to free block not in datazone [ 445.763681][T14816] Trying to free block not in datazone [ 445.766138][T14816] Trying to free block not in datazone [ 445.767939][T14816] minix_free_block (loop1:6): bit already cleared [ 445.774284][T14816] Trying to free block not in datazone [ 445.777803][T14816] Trying to free block not in datazone 00:07:25 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20fee}], 0x1, 0x1000012, 0x0, 0x0) 00:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x5) 00:07:25 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x226080, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8118, 0x410000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x8004391) (async) write(r2, &(0x7f0000000180)="4ef17249ff18aabd4ca55c65da72b13b1cf4c624e5d12cd11cf85de15701623929e78f52c67842b29d1dc80efe758a409038b455bfe983d35a7deb5215f1320f843f8b55ccb480b1ceebda6a8b4b830eda6f2381e15b88514a3629d85c589a575a54e66d762069fcff44b0c5ebfd796a9325cbde2ce236175ce0dc", 0x7b) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f00000002c0)="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", 0x1000, 0x0, 0x0, 0x0, r3}]) io_destroy(r0) (async) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:25 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfbffffff, 0x0) [ 445.852305][T14826] loop3: detected capacity change from 0 to 64 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21001}], 0x1, 0x1000012, 0x0, 0x0) [ 445.886228][T14826] Trying to free block not in datazone [ 445.887578][T14826] Trying to free block not in datazone [ 445.895749][T14826] Trying to free block not in datazone [ 445.897034][T14826] Trying to free block not in datazone [ 445.898328][T14826] minix_free_block (loop3:6): bit already cleared [ 445.909475][T14826] Trying to free block not in datazone [ 445.910742][T14826] Trying to free block not in datazone [ 445.923743][T14835] loop1: detected capacity change from 0 to 64 [ 445.948698][T14835] Trying to free block not in datazone [ 445.955044][T14835] Trying to free block not in datazone [ 445.958651][T14835] Trying to free block not in datazone 00:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x6) 00:07:25 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x226080, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8118, 0x410000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x8004391) (async) write(r2, &(0x7f0000000180)="4ef17249ff18aabd4ca55c65da72b13b1cf4c624e5d12cd11cf85de15701623929e78f52c67842b29d1dc80efe758a409038b455bfe983d35a7deb5215f1320f843f8b55ccb480b1ceebda6a8b4b830eda6f2381e15b88514a3629d85c589a575a54e66d762069fcff44b0c5ebfd796a9325cbde2ce236175ce0dc", 0x7b) (async) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f00000002c0)="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", 0x1000, 0x0, 0x0, 0x0, r3}]) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:25 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21100}], 0x1, 0x1000012, 0x0, 0x0) [ 445.980468][T14835] Trying to free block not in datazone [ 445.981715][T14835] minix_free_block (loop1:6): bit already cleared 00:07:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 445.986734][T14830] Injecting memory failure for pfn 0x1bbc95 at process virtual address 0x20495000 [ 445.991267][T14835] Trying to free block not in datazone [ 445.999612][T14835] Trying to free block not in datazone [ 446.022735][T14830] Memory failure: 0x1bbc95: recovery action for dirty LRU page: Recovered [ 446.027849][T14830] Injecting memory failure for pfn 0x1bbe95 at process virtual address 0x20695000 [ 446.043528][T14847] loop3: detected capacity change from 0 to 64 [ 446.051577][T14847] Trying to free block not in datazone [ 446.053314][T14847] Trying to free block not in datazone [ 446.062882][T14847] Trying to free block not in datazone [ 446.064039][T14830] Memory failure: 0x1bbe95: recovery action for dirty LRU page: Recovered [ 446.071055][T14847] Trying to free block not in datazone [ 446.079058][T14847] minix_free_block (loop3:6): bit already cleared [ 446.085843][T14847] Trying to free block not in datazone [ 446.088569][T14847] Trying to free block not in datazone [ 446.088788][T14830] Injecting memory failure for pfn 0x1bbc60 at process virtual address 0x20460000 [ 446.095936][T14830] Memory failure: 0x1bbc60: recovery action for dirty LRU page: Recovered [ 446.107080][T14830] Injecting memory failure for pfn 0x1bbc61 at process virtual address 0x20461000 [ 446.137598][T14830] Memory failure: 0x1bbc61: recovery action for dirty LRU page: Recovered 00:07:26 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f0000, 0x0) 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21200}], 0x1, 0x1000012, 0x0, 0x0) 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:26 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x7) [ 446.186840][T14859] loop3: detected capacity change from 0 to 64 [ 446.197253][T14861] loop1: detected capacity change from 0 to 64 [ 446.217420][T14859] Trying to free block not in datazone [ 446.218710][T14859] Trying to free block not in datazone [ 446.229776][T14859] Trying to free block not in datazone [ 446.231003][T14859] Trying to free block not in datazone [ 446.232243][T14859] minix_free_block (loop3:6): bit already cleared [ 446.238047][T14861] Trying to free block not in datazone 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21300}], 0x1, 0x1000012, 0x0, 0x0) [ 446.242289][T14861] Trying to free block not in datazone [ 446.243949][T14859] Trying to free block not in datazone 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 446.248304][T14861] Trying to free block not in datazone [ 446.254035][T14861] Trying to free block not in datazone [ 446.257165][T14859] Trying to free block not in datazone [ 446.258817][T14861] minix_free_block (loop1:6): bit already cleared [ 446.263115][T14861] Trying to free block not in datazone [ 446.265574][T14861] Trying to free block not in datazone 00:07:26 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_destroy(r0) io_destroy(r0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x8) 00:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffff5, 0x0) 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21400}], 0x1, 0x1000012, 0x0, 0x0) [ 446.369031][T14864] Injecting memory failure for pfn 0x1bc295 at process virtual address 0x20495000 [ 446.377501][T14876] loop3: detected capacity change from 0 to 64 [ 446.392862][T14876] Trying to free block not in datazone [ 446.394129][T14876] Trying to free block not in datazone [ 446.399268][T14878] loop1: detected capacity change from 0 to 64 [ 446.402047][T14864] Memory failure: 0x1bc295: recovery action for dirty LRU page: Recovered [ 446.404085][T14876] Trying to free block not in datazone [ 446.405421][T14876] Trying to free block not in datazone [ 446.406736][T14876] minix_free_block (loop3:6): bit already cleared [ 446.410298][T14864] Injecting memory failure for pfn 0x1bac95 at process virtual address 0x20695000 [ 446.416956][T14876] Trying to free block not in datazone [ 446.418286][T14876] Trying to free block not in datazone [ 446.436156][T14878] Trying to free block not in datazone [ 446.437426][T14878] Trying to free block not in datazone [ 446.438728][T14878] Trying to free block not in datazone [ 446.441114][T14878] Trying to free block not in datazone [ 446.442375][T14878] minix_free_block (loop1:6): bit already cleared [ 446.443961][T14878] Trying to free block not in datazone [ 446.445217][T14878] Trying to free block not in datazone [ 446.491978][T14882] Injecting memory failure for pfn 0x1bc260 at process virtual address 0x20460000 [ 446.494677][T14864] Memory failure: 0x1bac95: recovery action for dirty LRU page: Recovered [ 446.501195][T14882] Memory failure: 0x1bc260: recovery action for dirty LRU page: Recovered [ 446.503028][T14882] Injecting memory failure for pfn 0x1bc261 at process virtual address 0x20461000 [ 446.505103][T14882] Memory failure: 0x1bc261: recovery action for dirty LRU page: Recovered 00:07:26 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc) 00:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffffb, 0x0) 00:07:26 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21500}], 0x1, 0x1000012, 0x0, 0x0) [ 446.558369][T14890] loop3: detected capacity change from 0 to 64 [ 446.561785][T14891] loop1: detected capacity change from 0 to 64 [ 446.578263][T14891] Trying to free block not in datazone [ 446.580143][T14891] Trying to free block not in datazone [ 446.581327][T14891] Trying to free block not in datazone [ 446.584685][T14890] Trying to free block not in datazone [ 446.589043][T14891] Trying to free block not in datazone [ 446.592790][T14890] Trying to free block not in datazone [ 446.596350][T14890] Trying to free block not in datazone [ 446.598773][T14891] minix_free_block (loop1:6): bit already cleared [ 446.604600][T14890] Trying to free block not in datazone [ 446.608296][T14891] Trying to free block not in datazone [ 446.609842][T14890] minix_free_block (loop3:6): bit already cleared 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21600}], 0x1, 0x1000012, 0x0, 0x0) [ 446.616204][T14891] Trying to free block not in datazone [ 446.618575][T14890] Trying to free block not in datazone [ 446.622517][T14890] Trying to free block not in datazone 00:07:26 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)="f92242cd3c54d2ce1a968cd7b18d41c20b221876ad5b36c44dc3d5b5cbab2f1a775675e4f178d27b89e28d7a8334398933af10291af9bc79f0fc200abec55fc2f9dfffba2e2010a68ab30547e6e174dd7640d29d5dbe23268b9e8937fa870900a6bbc4280824dd37992a2bb55638c200bc095557fa44fa8c63d7e9c0d963adaf555f0abbe3106a6e4d27ecfb419a7ea0cfd1", 0x92, 0x8, 0x0, 0x3, r3}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x2) 00:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe) [ 446.712315][T14896] Injecting memory failure for pfn 0x1bc695 at process virtual address 0x20495000 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21700}], 0x1, 0x1000012, 0x0, 0x0) 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:26 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)="f92242cd3c54d2ce1a968cd7b18d41c20b221876ad5b36c44dc3d5b5cbab2f1a775675e4f178d27b89e28d7a8334398933af10291af9bc79f0fc200abec55fc2f9dfffba2e2010a68ab30547e6e174dd7640d29d5dbe23268b9e8937fa870900a6bbc4280824dd37992a2bb55638c200bc095557fa44fa8c63d7e9c0d963adaf555f0abbe3106a6e4d27ecfb419a7ea0cfd1", 0x92, 0x8, 0x0, 0x3, r3}]) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 446.757407][T14907] loop1: detected capacity change from 0 to 64 [ 446.760469][T14909] loop3: detected capacity change from 0 to 64 [ 446.773011][T14907] Trying to free block not in datazone [ 446.774307][T14907] Trying to free block not in datazone [ 446.775590][T14907] Trying to free block not in datazone [ 446.778033][T14909] Trying to free block not in datazone [ 446.779272][T14909] Trying to free block not in datazone [ 446.785786][T14907] Trying to free block not in datazone [ 446.787071][T14907] minix_free_block (loop1:6): bit already cleared [ 446.788474][T14907] Trying to free block not in datazone [ 446.789190][T14896] Memory failure: 0x1bc695: recovery action for dirty LRU page: Recovered [ 446.790337][T14909] Trying to free block not in datazone [ 446.793192][T14909] Trying to free block not in datazone [ 446.798798][T14896] Injecting memory failure for pfn 0x1bc895 at process virtual address 0x20695000 [ 446.798903][T14907] Trying to free block not in datazone [ 446.802451][T14909] minix_free_block (loop3:6): bit already cleared [ 446.803907][T14909] Trying to free block not in datazone [ 446.805158][T14909] Trying to free block not in datazone 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21800}], 0x1, 0x1000012, 0x0, 0x0) [ 446.890146][T14896] Memory failure: 0x1bc895: recovery action for dirty LRU page: Recovered [ 446.896806][T14923] Injecting memory failure for pfn 0x1bc660 at process virtual address 0x20460000 [ 446.919941][T14923] Memory failure: 0x1bc660: recovery action for dirty LRU page: Recovered [ 446.921741][T14923] Injecting memory failure for pfn 0x1bc661 at process virtual address 0x20461000 [ 446.939557][T14923] Memory failure: 0x1bc661: recovery action for dirty LRU page: Recovered 00:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf) 00:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x3) 00:07:26 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_destroy(r0) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) dup(r2) (async) r3 = dup(r2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)="f92242cd3c54d2ce1a968cd7b18d41c20b221876ad5b36c44dc3d5b5cbab2f1a775675e4f178d27b89e28d7a8334398933af10291af9bc79f0fc200abec55fc2f9dfffba2e2010a68ab30547e6e174dd7640d29d5dbe23268b9e8937fa870900a6bbc4280824dd37992a2bb55638c200bc095557fa44fa8c63d7e9c0d963adaf555f0abbe3106a6e4d27ecfb419a7ea0cfd1", 0x92, 0x8, 0x0, 0x3, r3}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21900}], 0x1, 0x1000012, 0x0, 0x0) 00:07:26 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 447.005248][T14933] loop1: detected capacity change from 0 to 64 [ 447.008024][T14936] loop3: detected capacity change from 0 to 64 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21a00}], 0x1, 0x1000012, 0x0, 0x0) [ 447.023498][T14933] Trying to free block not in datazone [ 447.024914][T14933] Trying to free block not in datazone [ 447.030150][T14933] Trying to free block not in datazone [ 447.033802][T14933] Trying to free block not in datazone [ 447.036270][T14933] minix_free_block (loop1:6): bit already cleared [ 447.043414][T14936] Trying to free block not in datazone [ 447.044739][T14936] Trying to free block not in datazone [ 447.045977][T14936] Trying to free block not in datazone [ 447.047279][T14936] Trying to free block not in datazone [ 447.050222][T14933] Trying to free block not in datazone [ 447.052705][T14936] minix_free_block (loop3:6): bit already cleared [ 447.054497][T14933] Trying to free block not in datazone [ 447.056991][T14936] Trying to free block not in datazone [ 447.061746][T14936] Trying to free block not in datazone 00:07:27 executing program 5: io_setup(0x80, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0) 00:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x10) 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4) 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21b00}], 0x1, 0x1000012, 0x0, 0x0) [ 447.154375][T14947] loop3: detected capacity change from 0 to 64 [ 447.168825][T14947] Trying to free block not in datazone [ 447.174647][T14947] Trying to free block not in datazone [ 447.179286][T14947] Trying to free block not in datazone [ 447.181553][T14947] Trying to free block not in datazone 00:07:27 executing program 5: io_setup(0x80, &(0x7f0000000280)=0x0) io_destroy(r0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) (async) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0) [ 447.191143][T14947] minix_free_block (loop3:6): bit already cleared 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 447.197326][T14947] Trying to free block not in datazone [ 447.201376][T14947] Trying to free block not in datazone 00:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x6) 00:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x11) [ 447.277238][T14963] loop1: detected capacity change from 0 to 64 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21c00}], 0x1, 0x1000012, 0x0, 0x0) [ 447.284208][T14938] Injecting memory failure for pfn 0x1bca60 at process virtual address 0x20460000 [ 447.295200][T14963] Trying to free block not in datazone [ 447.302294][T14963] Trying to free block not in datazone [ 447.304377][T14964] loop3: detected capacity change from 0 to 64 [ 447.306991][T14963] Trying to free block not in datazone [ 447.308578][T14938] Memory failure: 0x1bca60: recovery action for dirty LRU page: Recovered [ 447.311956][T14963] Trying to free block not in datazone [ 447.314639][T14963] minix_free_block (loop1:6): bit already cleared [ 447.318156][T14963] Trying to free block not in datazone [ 447.321058][T14964] Trying to free block not in datazone [ 447.323033][T14963] Trying to free block not in datazone [ 447.324326][T14964] Trying to free block not in datazone [ 447.327412][T14964] Trying to free block not in datazone [ 447.338659][T14964] Trying to free block not in datazone [ 447.344285][T14964] minix_free_block (loop3:6): bit already cleared [ 447.345782][T14964] Trying to free block not in datazone [ 447.346992][T14964] Trying to free block not in datazone 00:07:27 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:27 executing program 5: io_setup(0x80, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0) io_setup(0x80, &(0x7f0000000280)) (async) io_destroy(r0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) dup(r1) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) dup(r3) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000}) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0) (async) 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x8) 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21d00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x12) [ 447.434928][T14982] loop1: detected capacity change from 0 to 64 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 447.468932][T14982] Trying to free block not in datazone [ 447.471346][T14982] Trying to free block not in datazone [ 447.472631][T14982] Trying to free block not in datazone [ 447.481817][T14986] loop3: detected capacity change from 0 to 64 [ 447.485704][T14982] Trying to free block not in datazone [ 447.487013][T14982] minix_free_block (loop1:6): bit already cleared 00:07:27 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3f, r1, &(0x7f0000000000)="e0fd53722d1c4d12dbb17e8396810091f1008bed5fd3eb626bb13f062987734f4fd437279c28649e107d32152a62b47de3379c3fb3229351d2a9fa865ed7aac856c4707ec11607ddf7223c0a703b532efdd9dd3b7dbcccab28d9ad808215d8a424e544cf1b40def1528b590b", 0x6c, 0x2}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 447.497538][T14986] Trying to free block not in datazone [ 447.498858][T14986] Trying to free block not in datazone [ 447.503632][T14982] Trying to free block not in datazone [ 447.506084][T14986] Trying to free block not in datazone [ 447.508614][T14982] Trying to free block not in datazone [ 447.510326][T14986] Trying to free block not in datazone [ 447.513385][T14986] minix_free_block (loop3:6): bit already cleared [ 447.516484][T14986] Trying to free block not in datazone [ 447.520517][T14986] Trying to free block not in datazone 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21e00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc) 00:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x41) 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 447.583436][T14972] Injecting memory failure for pfn 0x1bd060 at process virtual address 0x20460000 [ 447.604792][T14998] loop1: detected capacity change from 0 to 64 [ 447.621115][T15000] loop3: detected capacity change from 0 to 64 [ 447.628159][T14998] Trying to free block not in datazone [ 447.631279][T14998] Trying to free block not in datazone [ 447.632536][T14998] Trying to free block not in datazone [ 447.633877][T14998] Trying to free block not in datazone [ 447.636375][T14998] minix_free_block (loop1:6): bit already cleared [ 447.640048][T14998] Trying to free block not in datazone [ 447.641295][T14972] Memory failure: 0x1bd060: recovery action for dirty LRU page: Recovered [ 447.657614][T15000] Trying to free block not in datazone [ 447.661449][T14998] Trying to free block not in datazone [ 447.663405][T15000] Trying to free block not in datazone [ 447.664737][T15000] Trying to free block not in datazone [ 447.665962][T15000] Trying to free block not in datazone [ 447.667217][T15000] minix_free_block (loop3:6): bit already cleared [ 447.670407][T15000] Trying to free block not in datazone 00:07:27 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21f00}], 0x1, 0x1000012, 0x0, 0x0) 00:07:27 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3f, r1, &(0x7f0000000000)="e0fd53722d1c4d12dbb17e8396810091f1008bed5fd3eb626bb13f062987734f4fd437279c28649e107d32152a62b47de3379c3fb3229351d2a9fa865ed7aac856c4707ec11607ddf7223c0a703b532efdd9dd3b7dbcccab28d9ad808215d8a424e544cf1b40def1528b590b", 0x6c, 0x2}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 447.705035][T15000] Trying to free block not in datazone 00:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe) 00:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x16f) 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x22000}], 0x1, 0x1000012, 0x0, 0x0) 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 447.815393][T15017] loop1: detected capacity change from 0 to 64 [ 447.826442][T15018] loop3: detected capacity change from 0 to 64 [ 447.846458][T15017] Trying to free block not in datazone [ 447.858390][T15018] Trying to free block not in datazone [ 447.859965][T15018] Trying to free block not in datazone 00:07:27 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x22100}], 0x1, 0x1000012, 0x0, 0x0) [ 447.863442][T15018] Trying to free block not in datazone [ 447.864945][T15018] Trying to free block not in datazone [ 447.868566][T15018] minix_free_block (loop3:6): bit already cleared [ 447.873848][T15018] Trying to free block not in datazone [ 447.877435][T15018] Trying to free block not in datazone [ 447.879669][T15017] Trying to free block not in datazone [ 447.880790][T15017] Trying to free block not in datazone [ 447.881959][T15017] Trying to free block not in datazone [ 447.883188][T15017] minix_free_block (loop1:6): bit already cleared 00:07:27 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3f, r1, &(0x7f0000000000)="e0fd53722d1c4d12dbb17e8396810091f1008bed5fd3eb626bb13f062987734f4fd437279c28649e107d32152a62b47de3379c3fb3229351d2a9fa865ed7aac856c4707ec11607ddf7223c0a703b532efdd9dd3b7dbcccab28d9ad808215d8a424e544cf1b40def1528b590b", 0x6c, 0x2}]) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 447.884481][T15017] Trying to free block not in datazone [ 447.885662][T15017] Trying to free block not in datazone [ 447.896987][T15010] Injecting memory failure for pfn 0x1bc060 at process virtual address 0x20460000 00:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x204) 00:07:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf) [ 447.977927][T15010] Memory failure: 0x1bc060: recovery action for dirty LRU page: Recovered [ 448.001110][T15034] loop3: detected capacity change from 0 to 64 [ 448.032133][T15034] Trying to free block not in datazone [ 448.036800][T15034] Trying to free block not in datazone [ 448.040951][T15034] Trying to free block not in datazone [ 448.050504][T15034] Trying to free block not in datazone [ 448.051669][T15034] minix_free_block (loop3:6): bit already cleared [ 448.053080][T15034] Trying to free block not in datazone 00:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x24000}], 0x1, 0x1000012, 0x0, 0x0) 00:07:28 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0xffff, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:28 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x10) [ 448.073985][T15034] Trying to free block not in datazone 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:28 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x300) 00:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x24100}], 0x1, 0x1000012, 0x0, 0x0) [ 448.134032][T15045] loop1: detected capacity change from 0 to 64 [ 448.167222][T15045] Trying to free block not in datazone [ 448.181318][T15045] Trying to free block not in datazone [ 448.185953][T15045] Trying to free block not in datazone [ 448.189215][T15045] Trying to free block not in datazone [ 448.193024][T15045] minix_free_block (loop1:6): bit already cleared [ 448.194498][T15045] Trying to free block not in datazone [ 448.209542][T15045] Trying to free block not in datazone [ 448.210936][T15042] Injecting memory failure for pfn 0x1bc495 at process virtual address 0x20495000 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 448.237179][T15051] loop3: detected capacity change from 0 to 64 00:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x29100}], 0x1, 0x1000012, 0x0, 0x0) 00:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x11) [ 448.244662][T15042] Memory failure: 0x1bc495: recovery action for dirty LRU page: Recovered [ 448.255969][T15042] Injecting memory failure for pfn 0x1bd495 at process virtual address 0x20695000 [ 448.257590][T15051] Trying to free block not in datazone [ 448.259207][T15051] Trying to free block not in datazone 00:07:28 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0xffff, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_setup(0xffff, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) [ 448.285661][T15051] Trying to free block not in datazone [ 448.292675][T15051] Trying to free block not in datazone [ 448.299288][T15057] loop1: detected capacity change from 0 to 64 [ 448.300545][T15051] minix_free_block (loop3:6): bit already cleared [ 448.307939][T15051] Trying to free block not in datazone [ 448.317760][T15057] Trying to free block not in datazone [ 448.319111][T15057] Trying to free block not in datazone [ 448.327031][T15051] Trying to free block not in datazone [ 448.334168][T15057] Trying to free block not in datazone [ 448.338252][T15042] Memory failure: 0x1bd495: recovery action for dirty LRU page: Recovered 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 448.342165][T15062] Injecting memory failure for pfn 0x1bc460 at process virtual address 0x20460000 [ 448.345150][T15062] Memory failure: 0x1bc460: recovery action for dirty LRU page: Recovered [ 448.347269][T15062] Injecting memory failure for pfn 0x1bc461 at process virtual address 0x20461000 [ 448.350019][T15057] Trying to free block not in datazone [ 448.351308][T15057] minix_free_block (loop1:6): bit already cleared [ 448.352984][T15062] Memory failure: 0x1bc461: recovery action for dirty LRU page: Recovered [ 448.360061][T15057] Trying to free block not in datazone [ 448.361352][T15057] Trying to free block not in datazone 00:07:28 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x402) 00:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2ee0f}], 0x1, 0x1000012, 0x0, 0x0) 00:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x12) 00:07:28 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 448.456570][T15073] loop3: detected capacity change from 0 to 64 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 448.492456][T15073] Trying to free block not in datazone [ 448.493709][T15073] Trying to free block not in datazone [ 448.495049][T15073] Trying to free block not in datazone [ 448.510140][T15076] loop1: detected capacity change from 0 to 64 [ 448.519010][T15073] Trying to free block not in datazone [ 448.521345][T15073] minix_free_block (loop3:6): bit already cleared [ 448.522842][T15073] Trying to free block not in datazone 00:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2ff0f}], 0x1, 0x1000012, 0x0, 0x0) [ 448.547875][T15076] Trying to free block not in datazone [ 448.549061][T15076] Trying to free block not in datazone [ 448.563136][T15073] Trying to free block not in datazone [ 448.564507][T15076] Trying to free block not in datazone [ 448.567512][T15075] Injecting memory failure for pfn 0x1bcc95 at process virtual address 0x20495000 [ 448.569270][T15076] Trying to free block not in datazone [ 448.572198][T15076] minix_free_block (loop1:6): bit already cleared 00:07:28 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x406) [ 448.580432][T15076] Trying to free block not in datazone [ 448.581728][T15076] Trying to free block not in datazone 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 448.611806][T15075] Memory failure: 0x1bcc95: recovery action for dirty LRU page: Recovered 00:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x41) [ 448.628845][T15085] loop3: detected capacity change from 0 to 64 [ 448.632221][T15075] Injecting memory failure for pfn 0x1bd695 at process virtual address 0x20695000 [ 448.648925][T15085] Trying to free block not in datazone [ 448.654978][T15085] Trying to free block not in datazone [ 448.663063][T15085] Trying to free block not in datazone [ 448.665568][T15085] Trying to free block not in datazone 00:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x7ffff000}], 0x1, 0x1000012, 0x0, 0x0) [ 448.682781][T15091] loop1: detected capacity change from 0 to 64 00:07:28 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0xffff, &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) io_setup(0xffff, &(0x7f0000000000)) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) [ 448.690799][T15085] minix_free_block (loop3:6): bit already cleared [ 448.692222][T15085] Trying to free block not in datazone [ 448.693423][T15085] Trying to free block not in datazone [ 448.700805][T15086] Injecting memory failure for pfn 0x1bcc60 at process virtual address 0x20460000 [ 448.704117][T15075] Memory failure: 0x1bd695: recovery action for dirty LRU page: Recovered [ 448.718328][T15091] Trying to free block not in datazone [ 448.721975][T15091] Trying to free block not in datazone [ 448.723266][T15091] Trying to free block not in datazone 00:07:28 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x500) [ 448.747055][T15091] Trying to free block not in datazone 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 448.757792][T15091] minix_free_block (loop1:6): bit already cleared [ 448.759289][T15091] Trying to free block not in datazone [ 448.762878][T15086] Memory failure: 0x1bcc60: recovery action for dirty LRU page: Recovered [ 448.766281][T15086] Injecting memory failure for pfn 0x1bcc61 at process virtual address 0x20461000 [ 448.775758][T15091] Trying to free block not in datazone [ 448.779110][T15086] Memory failure: 0x1bcc61: recovery action for dirty LRU page: Recovered 00:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x170) [ 448.813101][T15100] loop3: detected capacity change from 0 to 64 00:07:28 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 448.861596][T15100] Trying to free block not in datazone [ 448.862873][T15100] Trying to free block not in datazone [ 448.864260][T15100] Trying to free block not in datazone [ 448.865486][T15100] Trying to free block not in datazone [ 448.866757][T15100] minix_free_block (loop3:6): bit already cleared 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 448.898975][T15105] loop1: detected capacity change from 0 to 64 [ 448.900996][T15100] Trying to free block not in datazone [ 448.902295][T15100] Trying to free block not in datazone [ 448.916368][T15105] Trying to free block not in datazone [ 448.921804][T15105] Trying to free block not in datazone [ 448.925394][T15105] Trying to free block not in datazone [ 448.928410][T15105] Trying to free block not in datazone 00:07:28 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x600) [ 448.939633][T15105] minix_free_block (loop1:6): bit already cleared [ 448.945318][T15105] Trying to free block not in datazone [ 448.948912][T15105] Trying to free block not in datazone [ 448.972940][T15102] Injecting memory failure for pfn 0x1bda95 at process virtual address 0x20495000 00:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x204) 00:07:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:28 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:29 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x604) [ 449.024933][T15102] Memory failure: 0x1bda95: recovery action for dirty LRU page: Recovered [ 449.033737][T15102] Injecting memory failure for pfn 0x1bdc95 at process virtual address 0x20695000 [ 449.084926][T15123] loop3: detected capacity change from 0 to 64 [ 449.090710][T15115] Injecting memory failure for pfn 0x1bda60 at process virtual address 0x20460000 [ 449.108835][T15102] Memory failure: 0x1bdc95: recovery action for dirty LRU page: Recovered [ 449.111211][T15123] Trying to free block not in datazone [ 449.112517][T15123] Trying to free block not in datazone [ 449.114168][T15123] Trying to free block not in datazone [ 449.115614][T15115] Memory failure: 0x1bda60: recovery action for dirty LRU page: Recovered [ 449.151148][T15123] Trying to free block not in datazone [ 449.154807][T15123] minix_free_block (loop3:6): bit already cleared [ 449.157540][T15115] Injecting memory failure for pfn 0x1bda61 at process virtual address 0x20461000 [ 449.160305][T15123] Trying to free block not in datazone [ 449.161654][T15123] Trying to free block not in datazone [ 449.163219][T15115] Memory failure: 0x1bda61: recovery action for dirty LRU page: Recovered 00:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:29 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x300) 00:07:29 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:29 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x700) 00:07:29 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 449.603859][T15129] loop1: detected capacity change from 0 to 64 [ 449.611393][T15132] loop3: detected capacity change from 0 to 64 00:07:29 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0xfffffdef}], 0x1, 0x1000012, 0x0, 0x0) [ 449.633911][T15132] Trying to free block not in datazone [ 449.635162][T15132] Trying to free block not in datazone [ 449.636354][T15132] Trying to free block not in datazone [ 449.637560][T15132] Trying to free block not in datazone [ 449.640182][T15129] Trying to free block not in datazone [ 449.641369][T15129] Trying to free block not in datazone [ 449.642503][T15129] Trying to free block not in datazone [ 449.643601][T15129] Trying to free block not in datazone [ 449.644750][T15129] minix_free_block (loop1:6): bit already cleared [ 449.646104][T15129] Trying to free block not in datazone [ 449.647224][T15129] Trying to free block not in datazone [ 449.659577][T15132] minix_free_block (loop3:6): bit already cleared [ 449.661029][T15132] Trying to free block not in datazone [ 449.662158][T15132] Trying to free block not in datazone 00:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 449.693061][T15135] Injecting memory failure for pfn 0x1bce95 at process virtual address 0x20495000 00:07:29 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc00) 00:07:29 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x402) 00:07:29 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_destroy(r0) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) (async) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) [ 449.749862][T15135] Memory failure: 0x1bce95: recovery action for dirty LRU page: Recovered [ 449.751760][T15135] Injecting memory failure for pfn 0x1bde95 at process virtual address 0x20695000 [ 449.762514][T15139] Injecting memory failure for pfn 0x1bce60 at process virtual address 0x20460000 00:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 449.799282][T15145] loop3: detected capacity change from 0 to 64 [ 449.827565][T15147] loop1: detected capacity change from 0 to 64 00:07:29 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 449.839930][T15145] Trying to free block not in datazone [ 449.841264][T15145] Trying to free block not in datazone [ 449.846714][T15145] Trying to free block not in datazone [ 449.848003][T15145] Trying to free block not in datazone [ 449.857198][T15147] Trying to free block not in datazone [ 449.858495][T15147] Trying to free block not in datazone [ 449.862303][T15145] minix_free_block (loop3:6): bit already cleared [ 449.863793][T15145] Trying to free block not in datazone [ 449.865014][T15147] Trying to free block not in datazone [ 449.866273][T15147] Trying to free block not in datazone [ 449.867564][T15147] minix_free_block (loop1:6): bit already cleared [ 449.868974][T15147] Trying to free block not in datazone [ 449.870374][T15145] Trying to free block not in datazone [ 449.876074][T15147] Trying to free block not in datazone [ 449.884593][T15135] Memory failure: 0x1bde95: recovery action for dirty LRU page: Recovered 00:07:29 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe00) 00:07:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 449.891132][T15139] Memory failure: 0x1bce60: recovery action for dirty LRU page: Recovered 00:07:29 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x406) [ 449.904432][T15139] Injecting memory failure for pfn 0x1bce61 at process virtual address 0x20461000 [ 449.910708][T15139] Memory failure: 0x1bce61: recovery action for dirty LRU page: Recovered 00:07:29 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) (async) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 449.979211][T15161] loop1: detected capacity change from 0 to 64 [ 449.995344][T15160] loop3: detected capacity change from 0 to 64 [ 450.006167][T15160] Trying to free block not in datazone [ 450.007690][T15161] Trying to free block not in datazone [ 450.007707][T15161] Trying to free block not in datazone [ 450.009127][T15160] Trying to free block not in datazone [ 450.019553][T15160] Trying to free block not in datazone [ 450.020842][T15160] Trying to free block not in datazone [ 450.022147][T15160] minix_free_block (loop3:6): bit already cleared 00:07:30 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) [ 450.025824][T15160] Trying to free block not in datazone [ 450.029550][T15160] Trying to free block not in datazone [ 450.039632][T15161] Trying to free block not in datazone [ 450.040942][T15161] Trying to free block not in datazone [ 450.042245][T15161] minix_free_block (loop1:6): bit already cleared [ 450.043798][T15161] Trying to free block not in datazone [ 450.045084][T15161] Trying to free block not in datazone [ 450.104758][T15168] Injecting memory failure for pfn 0x1be095 at process virtual address 0x20495000 [ 450.121737][T15168] Memory failure: 0x1be095: recovery action for dirty LRU page: Recovered [ 450.125909][T15168] Injecting memory failure for pfn 0x1be295 at process virtual address 0x20695000 [ 450.163565][T15168] Memory failure: 0x1be295: recovery action for dirty LRU page: Recovered [ 450.177038][T15168] Injecting memory failure for pfn 0x1be060 at process virtual address 0x20460000 [ 450.192573][T15168] Memory failure: 0x1be060: recovery action for dirty LRU page: Recovered [ 450.194451][T15168] Injecting memory failure for pfn 0x1be061 at process virtual address 0x20461000 [ 450.209532][T15168] Memory failure: 0x1be061: recovery action for dirty LRU page: Recovered 00:07:30 executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1000000000000}], 0x1, 0x1000012, 0x0, 0x0) 00:07:30 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x600) 00:07:30 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64) mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0) 00:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:07:30 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:07:30 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf00) [ 450.646915][T15179] loop3: detected capacity change from 0 to 64 [ 450.654462][T15180] loop1: detected capacity change from 0 to 64 [ 450.665468][T15177] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000 [ 450.672454][T15179] Trying to free block not in datazone [ 450.673802][T15177] page:0000000092c7635f refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fe00 [ 450.677275][T15179] Trying to free block not in datazone [ 450.680982][T15177] head:0000000092c7635f order:9 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 450.683163][T15179] Trying to free block not in datazone [ 450.684009][T15180] Trying to free block not in datazone [ 450.685515][T15179] Trying to free block not in datazone [ 450.685528][T15179] minix_free_block (loop3:6): bit already cleared [ 450.685546][T15179] Trying to free block not in datazone [ 450.685558][T15179] Trying to free block not in datazone [ 450.686831][T15177] flags: 0x5ffc00000010801(locked|arch_1|head|node=0|zone=2|lastcpupid=0x7ff) [ 450.701204][T15180] Trying to free block not in datazone [ 450.704153][T15180] Trying to free block not in datazone [ 450.705437][T15180] Trying to free block not in datazone [ 450.707880][T15180] minix_free_block (loop1:6): bit already cleared 00:07:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772) r4 = socket(0x10, 0x80002, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0) r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4) r11 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 450.712961][T15180] Trying to free block not in datazone [ 450.713203][T15177] raw: 05ffc00000010801 0000000000000000 dead000000000122 0000000000000000 00:07:30 executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x1100) [ 450.716463][T15180] Trying to free block not in datazone [ 450.725451][T15177] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000 00:07:30 executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd") truncate(&(0x7f0000000100)='./file2\x00', 0xfffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x604) [ 450.752056][T15177] page dumped because: VM_WARN_ON_ONCE_FOLIO(is_hzp) 00:07:30 executing program 5: io_setup(0x9, &(0x7f0000000280)=0x0) io_destroy(r0) io_setup(0xeb4, &(0x7f0000000000)=0x0) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) io_destroy(r1) pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000040)="a5e616485a75457aa157a7391bde9150fa62363361f32ccce43a77af467aa966b7f61842c51f54f99cc8fd33fcf77909868e6f59d96ada5dff8079351556ffbb5eec6ff1226340cad29a2ea7823510a6e88f0350de4f55debb19473c8de178b0f20aa6a448b34f0f2f27830f1662", 0x6e, 0x6, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000140)="6ae4e7f420e65b9b05c574c4e2ceb4e5e926271323cbc9edd77337fa5ebc24fa271cde0e5c34d574aa1855b5d8fafcf8ca481c74232ddc8d742a7ebb2ef96de31dca9716ced7e1ef5a614475eecfe037a0182fd7e6a64e32a384aab7c492855c268dc0117ccde3c5f222d9269b519d8549d33a7f986437c3f091a1cfd92cefc4310c8b03276b96e04b38c67983ccb779dfbff42f62dc56418fb079ffcdd4cd62edb9383a0242c6c4f8e56dc9873b933f44e10029ece3e6037623936e760d599f4a5407f8dc0af589ed4eb09271e4dc889b633eb468ea86ee20c6ad37fbe343582792fbd68cc97f36ff6b788d10370ff9755e05a6e355", 0xf6, 0xff}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="09e47c688f34b87142507e5ee2550925098c78c8ba1a672f32fc4e85be1922dd8fd5fd4b05072ec289288e37b35ac1028ea0145f1a8a917d2fb236dff5f61f0936e20007e703d143592060b1d289245019dfcf656902dc65d99f8466e5c23b6872212043b7ad258b519cedb6020551211f222bd56dbbb54441f1c0a539f8675c24cf7f4611832be18c7a5cb46f2a1251c6a7188a86837c85d9e561e287992906a48f1ab1ad3d2473bb65b413c650f2abd577054f92c62cf0a04cec8cbd88d8120c3599664acdab7874aecaed795dedf516921f6420865fb0a52e803e8551a97be252505bd012d9a5adb421a70b44ec1ca65520", 0xf3, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000400)="84a848177222ec65b48cdc038b34640706a2156233aa6b994ae200bc02160278e37ac17a1e34b1035bfceb8524916688d887cfc5036ab07499971ed415dc7aa43ca875cccad18628424787c4f555ee3df0520760c7bf015f01bb627542f610dd1c3a76f890a722831be5092b26322eaf934da9909bb423285ebb58bc07cf494c7e30c4bcff530b182c928b8c56d161846a2bc3414a1601e2007221f304670dcc96b2f4d7498fc2f90438ef935eb52a6ec509a61e6cf31bb5d2597890e5f46ff2576e60dfcd9962f2536dbe1ddc3a4436a6439863ed5b2d1293e7b97988936f3fda", 0xe1, 0x4, 0x0, 0x2}]) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 450.769224][T15177] ------------[ cut here ]------------