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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/204, 0xcc}], 0x3, &(0x7f0000001500)=""/253, 0xfd}, 0x5}], 0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7) (async)
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="400000000000000088000000810000001193af56360b1ae26d2b0c0c90181647183118da2369bac8c349eac1a970fa97fdd8b538b9838bc2206600000000000010000000000000000301000000000000c8000000000000001401000009081e178fe89c52c23f42dfaa2ce8072ac6e5d72fdb9257e3b387497d1802162b12e3f24483a58128e50dfd39a9aacc3f94a215042ad91bbf5f1454bb3a67e1f2f1174e2f12a8ea6c30cb9373bd20daeb2ddc586063a1d4b02ab408dc019ead99ab11358913a209cd45c48a2c1b11a8af6208dd16f9b8566d84c6019c312c256339619ca2fca55827b722e500031ef95e635b0500000004aa4872c981f4efa0eb4a23f4956d327759e1df00"/280], 0x118}, 0x4004810)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0)
pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) (async)
pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x10000)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r7, 0x4, 0x0) (async)
fcntl$setstatus(r7, 0x4, 0x0)
r8 = dup(r7)
pwritev2(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0)
sendfile(r8, r7, 0x0, 0x87fffa0) (async)
sendfile(r8, r7, 0x0, 0x87fffa0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

00:07:14 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x10fee}], 0x1, 0x1000012, 0x0, 0x0)

[  434.954632][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  434.961070][T14023] loop3: detected capacity change from 0 to 64
[  434.967503][T14020] Trying to free block not in datazone
[  434.968673][T14020] Trying to free block not in datazone
[  434.978252][T14020] Trying to free block not in datazone
[  434.981290][T14020] Trying to free block not in datazone
[  434.987407][T14023] Trying to free block not in datazone
[  434.988877][T14023] Trying to free block not in datazone
[  434.991844][T14020] minix_free_block (loop1:6): bit already cleared
[  434.996817][T14023] Trying to free block not in datazone
[  434.998355][T14023] Trying to free block not in datazone
[  435.000005][T14020] Trying to free block not in datazone
[  435.001202][T14020] Trying to free block not in datazone
00:07:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  435.009624][T14023] minix_free_block (loop3:6): bit already cleared
[  435.011099][T14023] Trying to free block not in datazone
[  435.012351][T14023] Trying to free block not in datazone
00:07:15 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x300, 0x0)

00:07:15 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async, rerun: 32)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 32)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400, r1, &(0x7f0000000040)="63a645fcc43cd77d9e473022e63ff10b1a970896ea8ab5b2739a237059c3515991d1aeebb1ef941845449858a1408250e3947edaae3b3b5f31564746b1ca3cfb206effcf4baebf4b23308a5fdea862abbb8d3f674e74576766456bb81a582cf3cb56c7fc6ab03440e51c", 0x6a, 0x7, 0x0, 0x6, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="ac35d4c17afdf7129f3bc48a812f7799c4ce3b7acfcbf92dc722198516f48b6d6bc9a7232beb26409d0467444944952759fc522c9cbb52adbaa00c983d2c8ac8804e2af46a150bf7c3a8826af3d71c524a99450c8cf483ab1c3ec4ffb7576b47a6e86ef7a3d65a0be1b90e09b409832b4a57044ed3b492202a2b63c9e64c8fd060edeee155131b6c3716ef7a7de792f45e2f8960a2efb41d588b2bd5c30c877225db536499242a624d10f193a3c7fa91e41a3c02de91bd7577cab970fb34235a102769491335c2e5522288a154dd373b8fd905b1c52787df88abb88efb286f652d547fc1a0216fdd40942638ecb244f43afe1f611610d7e8516e24545fbd2c5fbd5fc767a81d79", 0x107, 0x7f, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)="99cf5f317f9715e8f355ab0181d4aa1ce89b92f45d301b0d82b39b7c59c46fd859842613cdbdb74e356716884d363e1da38e814bb6ad6943a15a2d0b55e92966e9ee7abca668ea376087d582a01cabee0f1bff4a15f156c1768f8ae3dab6f7865996331b7240626bfedc322140d2438299dd47d74cd899fd1ec51b9bdc4a102bc02c77d99ddb1380671405d5a1fc9f51bf40203bf2ecd5a0a9a14ce2db0cad988b9e31d86fcfd40cd996ee1147247975ea08b7955e6ef52c763da81a7b80e6bed9793b968770a01424216613941054a275b4e84576813329bd5242e93e88bca87a41119f5e00b10d9ce7216b01a2447e0192", 0xf2, 0x3, 0x0, 0x3}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r5 = dup(r4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000540)={'custom1\x00'})

00:07:15 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x11fee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:15 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc00, 0x0)

[  435.075380][T14033] loop1: detected capacity change from 0 to 64
00:07:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  435.109837][T14033] Trying to free block not in datazone
[  435.111171][T14033] Trying to free block not in datazone
[  435.112323][T14033] Trying to free block not in datazone
[  435.127559][T14033] Trying to free block not in datazone
[  435.128836][T14033] minix_free_block (loop1:6): bit already cleared
[  435.137917][T14033] Trying to free block not in datazone
[  435.139227][T14033] Trying to free block not in datazone
00:07:15 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x12fee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:15 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe00, 0x0)

00:07:15 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x400, r1, &(0x7f0000000040)="63a645fcc43cd77d9e473022e63ff10b1a970896ea8ab5b2739a237059c3515991d1aeebb1ef941845449858a1408250e3947edaae3b3b5f31564746b1ca3cfb206effcf4baebf4b23308a5fdea862abbb8d3f674e74576766456bb81a582cf3cb56c7fc6ab03440e51c", 0x6a, 0x7, 0x0, 0x6, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x107, 0x7f, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)="99cf5f317f9715e8f355ab0181d4aa1ce89b92f45d301b0d82b39b7c59c46fd859842613cdbdb74e356716884d363e1da38e814bb6ad6943a15a2d0b55e92966e9ee7abca668ea376087d582a01cabee0f1bff4a15f156c1768f8ae3dab6f7865996331b7240626bfedc322140d2438299dd47d74cd899fd1ec51b9bdc4a102bc02c77d99ddb1380671405d5a1fc9f51bf40203bf2ecd5a0a9a14ce2db0cad988b9e31d86fcfd40cd996ee1147247975ea08b7955e6ef52c763da81a7b80e6bed9793b968770a01424216613941054a275b4e84576813329bd5242e93e88bca87a41119f5e00b10d9ce7216b01a2447e0192", 0xf2, 0x3, 0x0, 0x3}]) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r5 = dup(r4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000540)={'custom1\x00'})

00:07:15 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x402, 0x0)

[  435.228521][T14048] loop3: detected capacity change from 0 to 64
[  435.244369][T14052] loop1: detected capacity change from 0 to 64
[  435.248936][T14048] Trying to free block not in datazone
[  435.255147][T14048] Trying to free block not in datazone
[  435.257549][T14048] Trying to free block not in datazone
[  435.273682][T14052] Trying to free block not in datazone
[  435.276259][T14052] Trying to free block not in datazone
[  435.277475][T14048] Trying to free block not in datazone
[  435.278665][T14052] Trying to free block not in datazone
[  435.284534][T14048] minix_free_block (loop3:6): bit already cleared
[  435.287014][T14052] Trying to free block not in datazone
[  435.297607][T14048] Trying to free block not in datazone
[  435.302462][T14052] minix_free_block (loop1:6): bit already cleared
[  435.303795][T14052] Trying to free block not in datazone
[  435.304991][T14052] Trying to free block not in datazone
[  435.307006][T14048] Trying to free block not in datazone
[  435.574252][T14055] loop2: detected capacity change from 0 to 32768
[  435.579174][T14055] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  435.599858][T14055] XFS (loop2): Ending clean mount
00:07:15 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x13fee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:15 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

00:07:15 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x406, 0x0)

00:07:15 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf00, 0x0)

00:07:15 executing program 2:
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000001840)=ANY=[@ANYBLOB="006782497e640c096a3beca2ab34f5f0d2719b8f33cf68082281384e5cc89bdaff244b3ee948c96f5c4265904c5b5b9210ee86bd9e15ba174521323e401e17dd64f2d3a2336246f6ede1175305e5ca4674f2b7d983ee1e1ca3a90919f6daf4a3540f4a17700755eb554f81f92967b3fe37a162d6ae285e958da087d7982a753f3f"], 0x1, 0x9754, &(0x7f000001c600)="$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") (async)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000001840)=ANY=[@ANYBLOB="006782497e640c096a3beca2ab34f5f0d2719b8f33cf68082281384e5cc89bdaff244b3ee948c96f5c4265904c5b5b9210ee86bd9e15ba174521323e401e17dd64f2d3a2336246f6ede1175305e5ca4674f2b7d983ee1e1ca3a90919f6daf4a3540f4a17700755eb554f81f92967b3fe37a162d6ae285e958da087d7982a753f3f"], 0x1, 0x9754, &(0x7f000001c600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/204, 0xcc}], 0x3, &(0x7f0000001500)=""/253, 0xfd}, 0x5}], 0x1, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x4004810)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0)
pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x10000) (async)
sendfile(r4, r4, 0x0, 0x10000)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r7, 0x4, 0x0) (async)
fcntl$setstatus(r7, 0x4, 0x0)
dup(r7) (async)
r8 = dup(r7)
pwritev2(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0)
sendfile(r8, r7, 0x0, 0x87fffa0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[  435.952129][T14073] loop1: detected capacity change from 0 to 64
[  435.952426][T14075] loop3: detected capacity change from 0 to 64
00:07:15 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x14fee}], 0x1, 0x1000012, 0x0, 0x0)

[  435.976895][T14075] Trying to free block not in datazone
[  435.978245][T14075] Trying to free block not in datazone
[  435.979591][T14075] Trying to free block not in datazone
[  435.980784][T14075] Trying to free block not in datazone
[  435.982002][T14075] minix_free_block (loop3:6): bit already cleared
[  435.983599][T14075] Trying to free block not in datazone
[  435.988343][T14075] Trying to free block not in datazone
[  436.011720][T14073] Trying to free block not in datazone
[  436.015285][T14073] Trying to free block not in datazone
00:07:15 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1100, 0x0)

[  436.018026][T14073] Trying to free block not in datazone
[  436.025922][T14073] Trying to free block not in datazone
[  436.029633][T14073] minix_free_block (loop1:6): bit already cleared
00:07:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  436.034184][T14073] Trying to free block not in datazone
[  436.037759][T14073] Trying to free block not in datazone
00:07:16 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x15fee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:16 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x600, 0x0)

00:07:16 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)

[  436.109955][T14085] loop3: detected capacity change from 0 to 64
[  436.130214][T14085] Trying to free block not in datazone
[  436.131555][T14085] Trying to free block not in datazone
[  436.132973][T14085] Trying to free block not in datazone
[  436.134682][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.135963][T14090] loop1: detected capacity change from 0 to 64
[  436.145766][T14085] Trying to free block not in datazone
[  436.147200][T14085] minix_free_block (loop3:6): bit already cleared
[  436.151314][T14085] Trying to free block not in datazone
00:07:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  436.156283][T14085] Trying to free block not in datazone
00:07:16 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x16fee}], 0x1, 0x1000012, 0x0, 0x0)

[  436.172622][T14090] Trying to free block not in datazone
[  436.174042][T14090] Trying to free block not in datazone
[  436.179743][T14090] Trying to free block not in datazone
[  436.181160][T14090] Trying to free block not in datazone
[  436.199633][T14090] minix_free_block (loop1:6): bit already cleared
[  436.200994][T14090] Trying to free block not in datazone
[  436.202173][T14090] Trying to free block not in datazone
00:07:16 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1200, 0x0)

00:07:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:16 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x604, 0x0)

[  436.266798][T14100] loop3: detected capacity change from 0 to 64
[  436.282532][T14100] Trying to free block not in datazone
[  436.283793][T14100] Trying to free block not in datazone
[  436.285198][T14100] Trying to free block not in datazone
[  436.286523][T14100] Trying to free block not in datazone
[  436.307032][T14100] minix_free_block (loop3:6): bit already cleared
[  436.309809][T14100] Trying to free block not in datazone
[  436.313005][T14105] loop1: detected capacity change from 0 to 64
[  436.314490][T14100] Trying to free block not in datazone
[  436.333978][T14105] Trying to free block not in datazone
[  436.335154][T14105] Trying to free block not in datazone
[  436.336218][T14105] Trying to free block not in datazone
[  436.337354][T14105] Trying to free block not in datazone
[  436.338529][T14105] minix_free_block (loop1:6): bit already cleared
[  436.355983][T14105] Trying to free block not in datazone
[  436.358686][T14105] Trying to free block not in datazone
[  436.722318][T14108] loop2: detected capacity change from 0 to 32768
[  436.728259][T14108] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.757201][T14108] XFS (loop2): Ending clean mount
00:07:17 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x17fee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:17 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x88, 0x1ff, 0x40, 0x9, 0xffffffff, 0x400, 0x3, 0x6, 0x43, 0x6, 0x1, 0x2, 0x7a30452b, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

00:07:17 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000, 0x0)

00:07:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  437.119973][T14125] loop3: detected capacity change from 0 to 64
00:07:17 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc00, 0x0)

00:07:17 executing program 2:
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000001840)=ANY=[@ANYBLOB="006782497e640c096a3beca2ab34f5f0d2719b8f33cf68082281384e5cc89bdaff244b3ee948c96f5c4265904c5b5b9210ee86bd9e15ba174521323e401e17dd64f2d3a2336246f6ede1175305e5ca4674f2b7d983ee1e1ca3a90919f6daf4a3540f4a17700755eb554f81f92967b3fe37a162d6ae285e958da087d7982a753f3f"], 0x1, 0x9754, &(0x7f000001c600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}, {&(0x7f0000001400)=""/204, 0xcc}], 0x3, &(0x7f0000001500)=""/253, 0xfd}, 0x5}], 0x1, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfea7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/280], 0x118}, 0x4004810)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x0)
pwritev2(r4, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x10000)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r7, 0x4, 0x0)
r8 = dup(r7)
pwritev2(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1000000, 0x0, 0x0)
sendfile(r8, r7, 0x0, 0x87fffa0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

[  437.136062][T14128] loop1: detected capacity change from 0 to 64
[  437.147499][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
00:07:17 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x18fee}], 0x1, 0x1000012, 0x0, 0x0)

[  437.165181][T14128] Trying to free block not in datazone
[  437.166771][T14128] Trying to free block not in datazone
[  437.168312][T14128] Trying to free block not in datazone
[  437.169899][T14125] Trying to free block not in datazone
[  437.170453][T14128] Trying to free block not in datazone
[  437.171053][T14125] Trying to free block not in datazone
[  437.171063][T14125] Trying to free block not in datazone
[  437.171070][T14125] Trying to free block not in datazone
[  437.171076][T14125] minix_free_block (loop3:6): bit already cleared
[  437.171104][T14125] Trying to free block not in datazone
[  437.178300][T14128] minix_free_block (loop1:6): bit already cleared
[  437.184991][T14128] Trying to free block not in datazone
[  437.187645][T14128] Trying to free block not in datazone
00:07:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  437.215279][T14125] Trying to free block not in datazone
00:07:17 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x9a, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:17 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000, 0x0)

00:07:17 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe00, 0x0)

00:07:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  437.298446][T14137] loop3: detected capacity change from 0 to 64
[  437.323353][T14141] loop1: detected capacity change from 0 to 64
[  437.325197][T14137] Trying to free block not in datazone
[  437.326426][T14137] Trying to free block not in datazone
[  437.327733][T14137] Trying to free block not in datazone
00:07:17 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x19fee}], 0x1, 0x1000012, 0x0, 0x0)

[  437.342755][T14141] Trying to free block not in datazone
[  437.343587][T14137] Trying to free block not in datazone
[  437.345180][T14137] minix_free_block (loop3:6): bit already cleared
[  437.346559][T14137] Trying to free block not in datazone
[  437.347657][T14141] Trying to free block not in datazone
[  437.350671][T14137] Trying to free block not in datazone
[  437.356386][T14141] Trying to free block not in datazone
[  437.358872][T14141] Trying to free block not in datazone
[  437.384910][T14141] minix_free_block (loop1:6): bit already cleared
[  437.386390][T14141] Trying to free block not in datazone
[  437.387643][T14141] Trying to free block not in datazone
[  437.748859][T14146] loop2: detected capacity change from 0 to 32768
[  437.753992][T14146] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  437.777770][T14146] XFS (loop2): Ending clean mount
00:07:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:18 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4100, 0x0)

00:07:18 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf00, 0x0)

[  438.461315][T14160] loop3: detected capacity change from 0 to 64
00:07:18 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1afee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  438.484915][T14164] loop1: detected capacity change from 0 to 64
00:07:18 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18680000010000000000000008000000851000000000000005c7000480000000180000000700000000000000080000008500000024000000a498f4ffffffffff186200001000000000000000faffffff18220000", @ANYRES32=r0, @ANYBLOB="000000008207000048137f20c8ffff7fa3b01b07000000d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:07:18 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x9a, &(0x7f0000000000)) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  438.507035][ T5983] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
00:07:18 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1bfee}], 0x1, 0x1000012, 0x0, 0x0)

[  438.535566][T14164] Trying to free block not in datazone
[  438.536893][T14164] Trying to free block not in datazone
[  438.561581][T14160] Trying to free block not in datazone
[  438.562948][T14160] Trying to free block not in datazone
[  438.564280][T14160] Trying to free block not in datazone
[  438.566724][T14160] Trying to free block not in datazone
[  438.569400][T14164] Trying to free block not in datazone
[  438.570546][T14164] Trying to free block not in datazone
[  438.571657][T14164] minix_free_block (loop1:6): bit already cleared
[  438.573138][T14164] Trying to free block not in datazone
[  438.574456][T14164] Trying to free block not in datazone
[  438.582336][T14160] minix_free_block (loop3:6): bit already cleared
[  438.588556][T14160] Trying to free block not in datazone
[  438.596852][T14160] Trying to free block not in datazone
00:07:18 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6f01, 0x0)

00:07:18 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1cfee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:18 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1100, 0x0)

[  438.700809][T14174] loop1: detected capacity change from 0 to 64
[  438.704376][T14177] loop3: detected capacity change from 0 to 64
[  438.716954][T14174] Trying to free block not in datazone
[  438.718262][T14174] Trying to free block not in datazone
00:07:18 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x9a, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_setup(0x9a, &(0x7f0000000000)) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)

[  438.729805][T14177] Trying to free block not in datazone
[  438.730942][T14177] Trying to free block not in datazone
[  438.732201][T14177] Trying to free block not in datazone
[  438.733397][T14177] Trying to free block not in datazone
[  438.734527][T14177] minix_free_block (loop3:6): bit already cleared
[  438.735918][T14177] Trying to free block not in datazone
[  438.759506][T14174] Trying to free block not in datazone
[  438.760773][T14174] Trying to free block not in datazone
[  438.764956][T14174] minix_free_block (loop1:6): bit already cleared
00:07:18 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1dfee}], 0x1, 0x1000012, 0x0, 0x0)

[  438.773906][T14174] Trying to free block not in datazone
[  438.775131][T14174] Trying to free block not in datazone
[  438.781818][T14177] Trying to free block not in datazone
00:07:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:18 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1200, 0x0)

00:07:18 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f, 0x0)

[  438.881704][T14195] loop1: detected capacity change from 0 to 64
[  438.895043][T14196] loop3: detected capacity change from 0 to 64
00:07:18 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1efee}], 0x1, 0x1000012, 0x0, 0x0)

[  438.910140][T14196] Trying to free block not in datazone
[  438.915779][T14196] Trying to free block not in datazone
[  438.919264][T14196] Trying to free block not in datazone
[  438.925072][T14195] Trying to free block not in datazone
[  438.927983][T14196] Trying to free block not in datazone
[  438.932577][T14196] minix_free_block (loop3:6): bit already cleared
[  438.936346][T14196] Trying to free block not in datazone
[  438.942024][T14196] Trying to free block not in datazone
[  438.949563][T14195] Trying to free block not in datazone
[  438.950786][T14195] Trying to free block not in datazone
[  438.951945][T14195] Trying to free block not in datazone
[  438.953127][T14195] minix_free_block (loop1:6): bit already cleared
[  438.954519][T14195] Trying to free block not in datazone
[  438.955688][T14195] Trying to free block not in datazone
00:07:19 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18680000010000000000000008000000851000000000000005c7000480000000180000000700000000000000080000008500000024000000a498f4ffffffffff186200001000000000000000faffffff18220000", @ANYRES32=r0, @ANYBLOB="000000008207000048137f20c8ffff7fa3b01b07000000d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:19 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x4, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000080))
io_setup(0x6, &(0x7f0000000140))
io_getevents(r0, 0x8, 0x800000000000184, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0))

00:07:19 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000, 0x0)

00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1ffee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:19 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000, 0x0)

[  439.055464][T14208] loop3: detected capacity change from 0 to 64
[  439.086633][T14208] Trying to free block not in datazone
[  439.088023][T14208] Trying to free block not in datazone
[  439.096018][T14208] Trying to free block not in datazone
[  439.097308][T14208] Trying to free block not in datazone
00:07:19 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18680000010000000000000008000000851000000000000005c7000480000000180000000700000000000000080000008500000024000000a498f4ffffffffff186200001000000000000000faffffff18220000", @ANYRES32=r0, @ANYBLOB="000000008207000048137f20c8ffff7fa3b01b07000000d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  439.104027][T14213] loop1: detected capacity change from 0 to 64
[  439.106552][T14208] minix_free_block (loop3:6): bit already cleared
[  439.107934][T14208] Trying to free block not in datazone
00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  439.115412][T14208] Trying to free block not in datazone
[  439.121217][T14213] Trying to free block not in datazone
[  439.122443][T14213] Trying to free block not in datazone
[  439.131945][T14213] Trying to free block not in datazone
[  439.133235][T14213] Trying to free block not in datazone
00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20002}], 0x1, 0x1000012, 0x0, 0x0)

[  439.142550][T14213] minix_free_block (loop1:6): bit already cleared
[  439.144110][T14213] Trying to free block not in datazone
00:07:19 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x80000, 0x0)

[  439.158574][T14213] Trying to free block not in datazone
00:07:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103)
open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400)

00:07:19 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000, 0x0)

[  439.223352][T14220] loop3: detected capacity change from 0 to 64
00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  439.239790][T14220] Trying to free block not in datazone
[  439.241037][T14220] Trying to free block not in datazone
[  439.242257][T14220] Trying to free block not in datazone
[  439.252218][T14224] loop1: detected capacity change from 0 to 64
[  439.252220][T14225] loop2: detected capacity change from 0 to 256
[  439.256919][T14220] Trying to free block not in datazone
[  439.258211][T14220] minix_free_block (loop3:6): bit already cleared
[  439.259744][T14220] Trying to free block not in datazone
00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20003}], 0x1, 0x1000012, 0x0, 0x0)

00:07:19 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x4, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000080)) (async)
io_setup(0x6, &(0x7f0000000140)) (async)
io_getevents(r0, 0x8, 0x800000000000184, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0))

[  439.278490][T14224] Trying to free block not in datazone
[  439.279878][T14224] Trying to free block not in datazone
[  439.285298][T14220] Trying to free block not in datazone
[  439.287935][T14224] Trying to free block not in datazone
[  439.289191][T14224] Trying to free block not in datazone
[  439.298052][T14224] minix_free_block (loop1:6): bit already cleared
[  439.313172][T14224] Trying to free block not in datazone
[  439.314426][T14224] Trying to free block not in datazone
00:07:19 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc0000, 0x0)

00:07:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103) (async, rerun: 32)
open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1) (async)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400)

00:07:19 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4100, 0x0)

[  439.368152][T14237] loop3: detected capacity change from 0 to 64
00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20004}], 0x1, 0x1000012, 0x0, 0x0)

[  439.399787][T14237] Trying to free block not in datazone
[  439.410268][T14237] Trying to free block not in datazone
[  439.417166][T14237] Trying to free block not in datazone
[  439.425462][T14237] Trying to free block not in datazone
[  439.433415][T14237] minix_free_block (loop3:6): bit already cleared
[  439.438970][T14242] loop1: detected capacity change from 0 to 64
[  439.441506][T14237] Trying to free block not in datazone
[  439.447614][T14237] Trying to free block not in datazone
[  439.457004][T14244] loop2: detected capacity change from 0 to 256
[  439.460248][T14242] Trying to free block not in datazone
[  439.466453][T14242] Trying to free block not in datazone
[  439.469630][T14242] Trying to free block not in datazone
00:07:19 executing program 5:
io_setup(0x9, &(0x7f0000000280)) (async)
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_destroy(r0) (async)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x4, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000080))
io_setup(0x6, &(0x7f0000000140))
io_getevents(r0, 0x8, 0x800000000000184, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0))

[  439.475770][T14242] Trying to free block not in datazone
[  439.480642][T14242] minix_free_block (loop1:6): bit already cleared
[  439.484468][T14242] Trying to free block not in datazone
00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  439.499485][T14242] Trying to free block not in datazone
00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20005}], 0x1, 0x1000012, 0x0, 0x0)

00:07:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$eJzs3TFrU10cBvB/3/bVUJBkEIoieMXFKTQV9xSpIAYUJYNOFpuiNLFgIKBDq5NfQr+Cjq6Cg7j6BUSQKrjYrYMQqTc0tqQmUtMbzO+35IF7npxz7pBLhpzcPtVYWVptLm9ubkQuNxFT5SjH1kQU4r+YjNTjAAD+JVvtdnxrp7JeCwBwODz/AWD8DPj8v3aISwIAhsz3fwAYPzdu3royX6ksXE+SXETjaavaqqav6fX55bgX9ajFbOTje0R7R5ovXa4szCbbPhei2ljv9Ndb1cnd/VLko9C7X0pSu/v/x3Sn/2E6ajEX+Tjeuz/Xs38kzp39Zf5i5OP9nViNeizFdrfbXyslycWrlT39oz/HAQAAAAAAAAAAAAAAAAAAAADAMBSTHT3P7ykW97ue9gc/H2jv+TxTcXIq270DAAAAAAAAAAAAAAAAAADAqGg+fLSyWK/XHvwu3H/34k2/MQOGic68B32fg4djZz4923/Mkz+5P383vD6d5W0ZMLzduHvifHPmwqisp1/4mo8Y0hQvR2KDfcPM8/Liq7WPXwZtZfihBAAAAAAAAAAAAAAAAAAAY6r7o9+sVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2en+///wQtZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHwEAAP//DhmnqA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103)
open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@fat=@quiet}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x1, 0x20e, &(0x7f00000006c0)="$eJzs3TFrU10cBvB/3/bVUJBkEIoieMXFKTQV9xSpIAYUJYNOFpuiNLFgIKBDq5NfQr+Cjq6Cg7j6BUSQKrjYrYMQqTc0tqQmUtMbzO+35IF7npxz7pBLhpzcPtVYWVptLm9ubkQuNxFT5SjH1kQU4r+YjNTjAAD+JVvtdnxrp7JeCwBwODz/AWD8DPj8v3aISwIAhsz3fwAYPzdu3royX6ksXE+SXETjaavaqqav6fX55bgX9ajFbOTje0R7R5ovXa4szCbbPhei2ljv9Ndb1cnd/VLko9C7X0pSu/v/x3Sn/2E6ajEX+Tjeuz/Xs38kzp39Zf5i5OP9nViNeizFdrfbXyslycWrlT39oz/HAQAAAAAAAAAAAAAAAAAAAADAMBSTHT3P7ykW97ue9gc/H2jv+TxTcXIq270DAAAAAAAAAAAAAAAAAADAqGg+fLSyWK/XHvwu3H/34k2/MQOGic68B32fg4djZz4923/Mkz+5P383vD6d5W0ZMLzduHvifHPmwqisp1/4mo8Y0hQvR2KDfcPM8/Liq7WPXwZtZfihBAAAAAAAAAAAAAAAAAAAY6r7o9+sVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2en+///wQtZ7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHwEAAP//DhmnqA==") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d2245a2e48d0"], 0xb) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f0000000280)=""/39, 0x27}, 0x40010103) (async)
open_tree(r0, &(0x7f00000001c0)='./bus\x00', 0x0) (async)
fcntl$setlease(r0, 0x400, 0x1) (async)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async)
name_to_handle_at(r1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000440)=@ceph_nfs_fh={0x8, 0x1, {0xd42}}, &(0x7f0000000480), 0x400) (async)

00:07:19 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x7001, 0x0)

00:07:19 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x100000, 0x0)

[  439.583784][T14256] loop3: detected capacity change from 0 to 64
[  439.616338][T14256] Trying to free block not in datazone
[  439.633438][T14256] Trying to free block not in datazone
[  439.634691][T14256] Trying to free block not in datazone
[  439.635927][T14256] Trying to free block not in datazone
[  439.640063][T14256] minix_free_block (loop3:6): bit already cleared
00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:19 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r2 = fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = dup(r3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}])
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0)

[  439.652293][T14256] Trying to free block not in datazone
[  439.653524][T14256] Trying to free block not in datazone
[  439.670081][T14262] loop1: detected capacity change from 0 to 64
[  439.674308][T14263] loop2: detected capacity change from 0 to 256
00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20006}], 0x1, 0x1000012, 0x0, 0x0)

[  439.702873][T14262] Trying to free block not in datazone
00:07:19 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x200001, 0x0)

[  439.715383][T14262] Trying to free block not in datazone
[  439.728316][T14262] Trying to free block not in datazone
00:07:19 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
r2 = fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) (async)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = dup(r3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}])
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0)

00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  439.770297][T14262] Trying to free block not in datazone
[  439.771503][T14262] minix_free_block (loop1:6): bit already cleared
[  439.772861][T14262] Trying to free block not in datazone
[  439.774011][T14262] Trying to free block not in datazone
[  439.801195][T14288] loop3: detected capacity change from 0 to 64
00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20007}], 0x1, 0x1000012, 0x0, 0x0)

00:07:19 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f, 0x0)

00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  439.853067][T14288] Trying to free block not in datazone
[  439.854378][T14288] Trying to free block not in datazone
00:07:19 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  439.860721][T14288] Trying to free block not in datazone
[  439.861989][T14288] Trying to free block not in datazone
00:07:19 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r2 = fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = dup(r3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}])
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)=ANY=[@ANYBLOB="2e69b39ea5f91e0fcaf094a029166744943f7279576235b2c49b0bf0106068810be6356bad92f0ff9c633a861c486f1728c6d0716752b3fa15de27392af48e606e00606c323b88306eb0c9131588b97328acd0efee8adcf408b8952d", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
dup(r3) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
dup(r6) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
io_submit(r0, 0x6, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="c876f18ed4cc91db52e3ed9f079f509aa0cedec03038ea79a18f70f2ab53404095ab84fa14975f135aecad3e9940ab2c293c68f224ab45e3da804b6913987a73e484efb176d3997cf382bf7a30337932545c6e92681836d0eecf9ddb365f2427c3147591f4dd0acef5ce52d7488c71b96346c7e04abcbc63cfb805ac3b58c1498f58ea473524021e0686ee66ab6610e3dfd57ac371af85aa85971d3a63a814491b16a1250e6d4c54779933eeb91f82a2b2ac0ea6832865436279c302f4773542b216bf3c965aa7b4256033c0f7875a57", 0xd0, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xeb, r1, &(0x7f00000002c0)="35cac046f622e83794aa0cdf30196dc87c79bb66dd5c84b143122f796b04fa425354aabee4e2518e73df0d93fbc6a8886aaf0e1c446241f6feb634c7e49fc8f88493582f30ee59b4c1a552786b2b00d8fc2fb045c9bc41878c6cebc857ae5c5c54d5be39b4f22e4d965a93edfb5f79f00bce155d4b2b96ff7d", 0x79, 0x2, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x40, r1, &(0x7f0000000340)="ed8f99cc83e418a7076fafea224a092cff16055da9d3da5f40e10ac6dd12d63ea86db503df977da18b5da55ef9f41e1fd18708176cb76a8143df738f6ae6415cfbef9331abb579dd309764892bbbc38701eb27a9b35e64496fe5d9a36719a9403ad736e5183d4d487ddccdacf04a9ce195a7ba63476f4900967870e2b438f97e2dd144f5b5315e6090b019ba03a6fb379847463cfd2f9c85870af4368c6e5be08bcc4a47907a04d3a085bf900a02bffab140d9e3c0e4a2afe8250ac86f1cfddb357fd14b97bb91ce9feb302166998c97dfcd5536ab2e8e", 0xd7, 0x8001, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000000480)="f28c00b862e20965e3a9fd0fe21eafd7e26860ab1ee0034ac5fd2e0a0bc66209d366c6b005ae7edb15a154f3bd103a6c665406ebc294635013434227fdabfca2b1ca31d026a14d602b44013a0f832f6f0c84d0cb1fc54fa230fc7d1a77325653bc795249c3e6bf6f6e5b5b", 0x6b, 0x1, 0x0, 0x4, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x68, 0xffffffffffffffff, &(0x7f0000000540)="dc5abb4613db0058dd22fb6822a9b69c7dd4ce5eaa5b7a6b024e47537255abc9eb7312d245", 0x25, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xff, r1, &(0x7f00000005c0)="6319a898a817a1dc2d62a2513c5240", 0xf, 0x400, 0x0, 0x1, r1}]) (async)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) (async)

[  439.905834][T14288] Trying to free block not in datazone
[  439.906905][T14295] loop1: detected capacity change from 0 to 64
[  439.907110][T14288] Trying to free block not in datazone
[  439.945981][T14295] Trying to free block not in datazone
[  439.947354][T14295] Trying to free block not in datazone
[  439.948628][T14295] Trying to free block not in datazone
[  439.961215][T14295] Trying to free block not in datazone
00:07:19 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20008}], 0x1, 0x1000012, 0x0, 0x0)

00:07:19 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x300001, 0x0)

[  439.969460][T14295] minix_free_block (loop1:6): bit already cleared
[  439.970878][T14295] Trying to free block not in datazone
[  439.979461][T14295] Trying to free block not in datazone
00:07:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:20 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x399d3, 0x0)

[  440.041237][T14313] loop3: detected capacity change from 0 to 64
00:07:20 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x3, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600001)
io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000140)="ec911947c3191fd11b3353d5f1307c2c8054f6e3425d9d23d42757af79f83730b075738d4322cb653fc40b19de762173fc4890b99e7aa6f90caa80c6458d7a4a111fe4933fbb095027aeb56fe5f917a3847cd588af0a5af51ed18563b34d2dc4086864cfe1ee9840680d3357f97c09d9d5e8ef9f483d9202e36874da27dbf936b57900c27b873d5078ad2620f1deffc390488febac691bdc8acc16480092b480f597fbb0314e8a9872683d0288427fa33c4efdb6a3faf8b0d0636464306693b9f71b81507a8667cc15a9dceb3bf528ea1c42ab5c2378d2d253653480f492ac", 0xdf, 0x1, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000240), 0x0, 0xafa}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2f, 0xffffffffffffffff, &(0x7f0000000300)="02e3c15541b8a227aa2b31f9c045709c0b1b8c22858e73f0359d71cf87c20ed392fc4aee5b4d0f0cd613704d50fb89494cc62648e332e1a6a49b0be3fea8db81edaa141a625d2d831b7bb4de3d889e6feb5468098b818760daa08d52e065823a8e7b23e3f486b4346d74c51a3d193e4931276f79c9eb3dcd55683e346e4d66ec92d5416072226878e47b7432733630dbce0b0349e3", 0x95, 0x6, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xbe, 0xffffffffffffffff, &(0x7f0000000400)="50464d76e9235f04f83f8a4d39c6e955c280c0e0479941ec641d0e481b69a168acd4d9e22039382cc36e665aaa5e3cf73a490a2b08fe8565f1b363519b60237e4cb5799ca216ec1adc1a72ee4f209a987400d5c77b58b8", 0x57, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0xffffffffffffffff, &(0x7f00000004c0)="f7d7bd56c024c86f014aa709c2b9f70e1e1162f317cbfdc175c188be4fe3fd659e79297015c71ce4f0b40096d56733a51fa860ca0e643fc86ae3ebc27cf1975feb78e22eba1ebceda8a741a2a460699caf164862c2b0b6777e579ae71157b6c841b9c3e345032a0bb803aeb2625a816d0a0be49556babd69b290accd61ca5706749e56", 0x83, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x1ff, 0xffffffffffffffff, &(0x7f00000005c0)="a1ee8bfd257322ec58839c55bb60700c1b5e913d", 0x14, 0x8000, 0x0, 0x2}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x0}, 0x0)

[  440.063580][T14300] Injecting memory failure for pfn 0x180e95 at process virtual address 0x20495000
00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20009}], 0x1, 0x1000012, 0x0, 0x0)

[  440.096883][T14317] loop1: detected capacity change from 0 to 64
[  440.098353][T14313] Trying to free block not in datazone
[  440.112924][T14313] Trying to free block not in datazone
[  440.114147][T14313] Trying to free block not in datazone
[  440.121049][T14313] Trying to free block not in datazone
[  440.122190][T14313] minix_free_block (loop3:6): bit already cleared
[  440.122953][T14317] Trying to free block not in datazone
[  440.123524][T14313] Trying to free block not in datazone
[  440.125958][T14313] Trying to free block not in datazone
00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  440.131385][T14317] Trying to free block not in datazone
[  440.140063][T14317] Trying to free block not in datazone
[  440.145016][T14317] Trying to free block not in datazone
[  440.148756][T14317] minix_free_block (loop1:6): bit already cleared
[  440.150026][T14300] Memory failure: 0x180e95: recovery action for dirty LRU page: Recovered
[  440.152169][T14300] Injecting memory failure for pfn 0x17fa95 at process virtual address 0x20695000
[  440.155003][T14317] Trying to free block not in datazone
[  440.158731][T14317] Trying to free block not in datazone
00:07:20 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x399e0, 0x0)

00:07:20 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1000000, 0x0)

00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000a}], 0x1, 0x1000012, 0x0, 0x0)

[  440.242978][T14300] Memory failure: 0x17fa95: recovery action for dirty LRU page: Recovered
[  440.267469][T14331] loop1: detected capacity change from 0 to 64
[  440.270222][T14300] Injecting memory failure for pfn 0x180e60 at process virtual address 0x20460000
[  440.278622][T14300] Memory failure: 0x180e60: recovery action for dirty LRU page: Recovered
[  440.290826][T14300] Injecting memory failure for pfn 0x180e61 at process virtual address 0x20461000
[  440.296865][T14333] loop3: detected capacity change from 0 to 64
[  440.301288][T14300] Memory failure: 0x180e61: recovery action for dirty LRU page: Recovered
[  440.301629][T14331] Trying to free block not in datazone
[  440.304188][T14331] Trying to free block not in datazone
[  440.305324][T14331] Trying to free block not in datazone
[  440.306430][T14331] Trying to free block not in datazone
[  440.307500][T14331] minix_free_block (loop1:6): bit already cleared
[  440.308810][T14331] Trying to free block not in datazone
[  440.325661][T14333] Trying to free block not in datazone
[  440.326971][T14333] Trying to free block not in datazone
[  440.328424][T14333] Trying to free block not in datazone
[  440.337972][T14333] Trying to free block not in datazone
00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000b}], 0x1, 0x1000012, 0x0, 0x0)

00:07:20 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x3, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600001)
io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000140)="ec911947c3191fd11b3353d5f1307c2c8054f6e3425d9d23d42757af79f83730b075738d4322cb653fc40b19de762173fc4890b99e7aa6f90caa80c6458d7a4a111fe4933fbb095027aeb56fe5f917a3847cd588af0a5af51ed18563b34d2dc4086864cfe1ee9840680d3357f97c09d9d5e8ef9f483d9202e36874da27dbf936b57900c27b873d5078ad2620f1deffc390488febac691bdc8acc16480092b480f597fbb0314e8a9872683d0288427fa33c4efdb6a3faf8b0d0636464306693b9f71b81507a8667cc15a9dceb3bf528ea1c42ab5c2378d2d253653480f492ac", 0xdf, 0x1, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000240), 0x0, 0xafa}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2f, 0xffffffffffffffff, &(0x7f0000000300)="02e3c15541b8a227aa2b31f9c045709c0b1b8c22858e73f0359d71cf87c20ed392fc4aee5b4d0f0cd613704d50fb89494cc62648e332e1a6a49b0be3fea8db81edaa141a625d2d831b7bb4de3d889e6feb5468098b818760daa08d52e065823a8e7b23e3f486b4346d74c51a3d193e4931276f79c9eb3dcd55683e346e4d66ec92d5416072226878e47b7432733630dbce0b0349e3", 0x95, 0x6, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xbe, 0xffffffffffffffff, &(0x7f0000000400)="50464d76e9235f04f83f8a4d39c6e955c280c0e0479941ec641d0e481b69a168acd4d9e22039382cc36e665aaa5e3cf73a490a2b08fe8565f1b363519b60237e4cb5799ca216ec1adc1a72ee4f209a987400d5c77b58b8", 0x57, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0xffffffffffffffff, &(0x7f00000004c0)="f7d7bd56c024c86f014aa709c2b9f70e1e1162f317cbfdc175c188be4fe3fd659e79297015c71ce4f0b40096d56733a51fa860ca0e643fc86ae3ebc27cf1975feb78e22eba1ebceda8a741a2a460699caf164862c2b0b6777e579ae71157b6c841b9c3e345032a0bb803aeb2625a816d0a0be49556babd69b290accd61ca5706749e56", 0x83, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x1ff, 0xffffffffffffffff, &(0x7f00000005c0)="a1ee8bfd257322ec58839c55bb60700c1b5e913d", 0x14, 0x8000, 0x0, 0x2}]) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x0}, 0x0)

00:07:20 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil) (async)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) (async)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  440.357531][T14333] minix_free_block (loop3:6): bit already cleared
[  440.364785][T14333] Trying to free block not in datazone
[  440.367725][T14331] Trying to free block not in datazone
[  440.375078][T14333] Trying to free block not in datazone
00:07:20 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000, 0x0)

00:07:20 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1002000, 0x0)

00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000c}], 0x1, 0x1000012, 0x0, 0x0)

00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  440.465166][T14348] loop1: detected capacity change from 0 to 64
[  440.483293][T14348] Trying to free block not in datazone
[  440.486979][T14348] Trying to free block not in datazone
[  440.491006][T14352] loop3: detected capacity change from 0 to 64
[  440.493608][T14348] Trying to free block not in datazone
[  440.495338][T14348] Trying to free block not in datazone
[  440.497746][T14348] minix_free_block (loop1:6): bit already cleared
[  440.502563][T14348] Trying to free block not in datazone
[  440.504609][T14348] Trying to free block not in datazone
00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000d}], 0x1, 0x1000012, 0x0, 0x0)

00:07:20 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x3, &(0x7f0000000000)=<r1=>0x0) (async)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10000)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x600001)
io_submit(r1, 0x6, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000140)="ec911947c3191fd11b3353d5f1307c2c8054f6e3425d9d23d42757af79f83730b075738d4322cb653fc40b19de762173fc4890b99e7aa6f90caa80c6458d7a4a111fe4933fbb095027aeb56fe5f917a3847cd588af0a5af51ed18563b34d2dc4086864cfe1ee9840680d3357f97c09d9d5e8ef9f483d9202e36874da27dbf936b57900c27b873d5078ad2620f1deffc390488febac691bdc8acc16480092b480f597fbb0314e8a9872683d0288427fa33c4efdb6a3faf8b0d0636464306693b9f71b81507a8667cc15a9dceb3bf528ea1c42ab5c2378d2d253653480f492ac", 0xdf, 0x1, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000240), 0x0, 0xafa}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2f, 0xffffffffffffffff, &(0x7f0000000300)="02e3c15541b8a227aa2b31f9c045709c0b1b8c22858e73f0359d71cf87c20ed392fc4aee5b4d0f0cd613704d50fb89494cc62648e332e1a6a49b0be3fea8db81edaa141a625d2d831b7bb4de3d889e6feb5468098b818760daa08d52e065823a8e7b23e3f486b4346d74c51a3d193e4931276f79c9eb3dcd55683e346e4d66ec92d5416072226878e47b7432733630dbce0b0349e3", 0x95, 0x6, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xbe, 0xffffffffffffffff, &(0x7f0000000400)="50464d76e9235f04f83f8a4d39c6e955c280c0e0479941ec641d0e481b69a168acd4d9e22039382cc36e665aaa5e3cf73a490a2b08fe8565f1b363519b60237e4cb5799ca216ec1adc1a72ee4f209a987400d5c77b58b8", 0x57, 0x8, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0xffffffffffffffff, &(0x7f00000004c0)="f7d7bd56c024c86f014aa709c2b9f70e1e1162f317cbfdc175c188be4fe3fd659e79297015c71ce4f0b40096d56733a51fa860ca0e643fc86ae3ebc27cf1975feb78e22eba1ebceda8a741a2a460699caf164862c2b0b6777e579ae71157b6c841b9c3e345032a0bb803aeb2625a816d0a0be49556babd69b290accd61ca5706749e56", 0x83, 0x40}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x1ff, 0xffffffffffffffff, &(0x7f00000005c0)="a1ee8bfd257322ec58839c55bb60700c1b5e913d", 0x14, 0x8000, 0x0, 0x2}]) (async, rerun: 64)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xd5, 0xffffffffffffffff, 0x0}, 0x0) (rerun: 64)

[  440.527551][T14352] Trying to free block not in datazone
00:07:20 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x80000, 0x0)

[  440.536683][T14352] Trying to free block not in datazone
[  440.548200][T14352] Trying to free block not in datazone
[  440.570168][T14352] Trying to free block not in datazone
[  440.571391][T14352] minix_free_block (loop3:6): bit already cleared
[  440.572801][T14352] Trying to free block not in datazone
00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  440.613040][T14352] Trying to free block not in datazone
[  440.615642][T14362] loop1: detected capacity change from 0 to 64
00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000e}], 0x1, 0x1000012, 0x0, 0x0)

00:07:20 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1003000, 0x0)

[  440.645557][T14362] Trying to free block not in datazone
[  440.646839][T14362] Trying to free block not in datazone
[  440.648108][T14362] Trying to free block not in datazone
00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  440.658760][T14362] Trying to free block not in datazone
[  440.661389][T14362] minix_free_block (loop1:6): bit already cleared
[  440.662780][T14362] Trying to free block not in datazone
[  440.664037][T14362] Trying to free block not in datazone
[  440.713004][T14369] loop3: detected capacity change from 0 to 64
[  440.735199][T14369] Trying to free block not in datazone
[  440.736480][T14369] Trying to free block not in datazone
[  440.737779][T14369] Trying to free block not in datazone
[  440.739033][T14369] Trying to free block not in datazone
[  440.750109][T14369] minix_free_block (loop3:6): bit already cleared
[  440.751557][T14369] Trying to free block not in datazone
[  440.752770][T14369] Trying to free block not in datazone
00:07:20 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000) (async)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) (async)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:20 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x7f, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
io_destroy(r1)

00:07:20 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc0000, 0x0)

00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2000f}], 0x1, 0x1000012, 0x0, 0x0)

00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:20 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000000, 0x0)

[  440.808119][T14379] loop1: detected capacity change from 0 to 64
[  440.824693][T14379] Trying to free block not in datazone
[  440.826002][T14379] Trying to free block not in datazone
[  440.827243][T14379] Trying to free block not in datazone
[  440.835345][T14384] loop3: detected capacity change from 0 to 64
[  440.837823][T14379] Trying to free block not in datazone
[  440.839069][T14379] minix_free_block (loop1:6): bit already cleared
00:07:20 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20010}], 0x1, 0x1000012, 0x0, 0x0)

[  440.849596][T14379] Trying to free block not in datazone
[  440.852209][T14379] Trying to free block not in datazone
[  440.854316][T14384] Trying to free block not in datazone
[  440.858962][T14384] Trying to free block not in datazone
00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  440.871126][T14384] Trying to free block not in datazone
[  440.872390][T14384] Trying to free block not in datazone
[  440.873651][T14384] minix_free_block (loop3:6): bit already cleared
[  440.883995][T14384] Trying to free block not in datazone
[  440.885297][T14384] Trying to free block not in datazone
00:07:20 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x100000, 0x0)

00:07:20 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x7f, &(0x7f0000000000)=<r1=>0x0)
socket$rxrpc(0x21, 0x2, 0x2) (async)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
io_destroy(r1)

00:07:20 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2040000, 0x0)

[  440.941542][T14400] loop1: detected capacity change from 0 to 64
[  440.946716][T14400] Trying to free block not in datazone
[  440.948039][T14400] Trying to free block not in datazone
[  440.949971][T14400] Trying to free block not in datazone
[  440.951310][T14400] Trying to free block not in datazone
[  440.952716][T14400] minix_free_block (loop1:6): bit already cleared
[  440.954246][T14400] Trying to free block not in datazone
[  440.955515][T14400] Trying to free block not in datazone
00:07:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  441.004997][T14402] loop3: detected capacity change from 0 to 64
[  441.039930][T14402] Trying to free block not in datazone
[  441.045732][T14402] Trying to free block not in datazone
00:07:21 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:21 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20011}], 0x1, 0x1000012, 0x0, 0x0)

00:07:21 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x200001, 0x0)

00:07:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  441.049218][T14402] Trying to free block not in datazone
[  441.062296][T14402] Trying to free block not in datazone
[  441.064217][T14409] loop1: detected capacity change from 0 to 64
00:07:21 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x7f, &(0x7f0000000000)) (async)
io_setup(0x7f, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
io_destroy(r1)

[  441.087740][T14402] minix_free_block (loop3:6): bit already cleared
[  441.091988][T14402] Trying to free block not in datazone
[  441.093172][T14402] Trying to free block not in datazone
[  441.110067][T14409] Trying to free block not in datazone
[  441.111209][T14409] Trying to free block not in datazone
00:07:21 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20012}], 0x1, 0x1000012, 0x0, 0x0)

[  441.112310][T14409] Trying to free block not in datazone
[  441.117040][T14409] Trying to free block not in datazone
[  441.119772][T14409] minix_free_block (loop1:6): bit already cleared
[  441.121144][T14409] Trying to free block not in datazone
[  441.123490][T14409] Trying to free block not in datazone
00:07:21 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x3000000, 0x0)

00:07:21 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x300001, 0x0)

00:07:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  441.205839][T14424] loop3: detected capacity change from 0 to 64
[  441.215511][T14425] loop1: detected capacity change from 0 to 64
[  441.228195][T14424] Trying to free block not in datazone
[  441.229959][T14424] Trying to free block not in datazone
[  441.231210][T14424] Trying to free block not in datazone
00:07:21 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20013}], 0x1, 0x1000012, 0x0, 0x0)

[  441.242470][T14425] Trying to free block not in datazone
[  441.243746][T14425] Trying to free block not in datazone
[  441.245125][T14424] Trying to free block not in datazone
[  441.247592][T14425] Trying to free block not in datazone
[  441.250110][T14424] minix_free_block (loop3:6): bit already cleared
[  441.252776][T14425] Trying to free block not in datazone
[  441.255167][T14424] Trying to free block not in datazone
[  441.256493][T14425] minix_free_block (loop1:6): bit already cleared
[  441.259228][T14424] Trying to free block not in datazone
[  441.261060][T14425] Trying to free block not in datazone
00:07:21 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x4, &(0x7f0000000000)=<r1=>0x0)
pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffc00}])

[  441.278564][T14425] Trying to free block not in datazone
00:07:21 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000000, 0x0)

[  441.341634][T14435] loop3: detected capacity change from 0 to 64
[  441.358346][T14435] Trying to free block not in datazone
[  441.365322][T14435] Trying to free block not in datazone
[  441.366501][T14435] Trying to free block not in datazone
[  441.367692][T14435] Trying to free block not in datazone
[  441.368925][T14435] minix_free_block (loop3:6): bit already cleared
[  441.372493][T14435] Trying to free block not in datazone
[  441.373638][T14435] Trying to free block not in datazone
[  441.378216][T14416] Injecting memory failure for pfn 0x181c95 at process virtual address 0x20495000
[  441.419104][T14416] Memory failure: 0x181c95: recovery action for dirty LRU page: Recovered
[  441.421231][T14416] Injecting memory failure for pfn 0x189495 at process virtual address 0x20695000
[  441.448903][T14416] Memory failure: 0x189495: recovery action for dirty LRU page: Recovered
[  441.507615][T14416] Injecting memory failure for pfn 0x181c60 at process virtual address 0x20460000
[  441.517877][T14416] Memory failure: 0x181c60: recovery action for dirty LRU page: Recovered
[  441.519887][T14416] Injecting memory failure for pfn 0x181c61 at process virtual address 0x20461000
[  441.534539][T14416] Memory failure: 0x181c61: recovery action for dirty LRU page: Recovered
00:07:21 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:21 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1000000, 0x0)

00:07:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:21 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20014}], 0x1, 0x1000012, 0x0, 0x0)

00:07:21 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x5000000, 0x0)

00:07:21 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async, rerun: 64)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async, rerun: 64)
io_setup(0x4, &(0x7f0000000000)=<r1=>0x0)
pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffc00}])

[  441.580538][T14444] loop3: detected capacity change from 0 to 64
[  441.598933][T14446] loop1: detected capacity change from 0 to 64
[  441.608241][T14444] Trying to free block not in datazone
[  441.609536][T14444] Trying to free block not in datazone
[  441.610840][T14444] Trying to free block not in datazone
[  441.611735][T14446] Trying to free block not in datazone
[  441.612016][T14444] Trying to free block not in datazone
[  441.612027][T14444] minix_free_block (loop3:6): bit already cleared
[  441.612044][T14444] Trying to free block not in datazone
[  441.612056][T14444] Trying to free block not in datazone
[  441.624648][T14446] Trying to free block not in datazone
[  441.627179][T14446] Trying to free block not in datazone
[  441.632658][T14446] Trying to free block not in datazone
[  441.635342][T14446] minix_free_block (loop1:6): bit already cleared
[  441.639227][T14446] Trying to free block not in datazone
00:07:21 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20015}], 0x1, 0x1000012, 0x0, 0x0)

00:07:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  441.644745][T14446] Trying to free block not in datazone
00:07:21 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1002000, 0x0)

00:07:21 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6000000, 0x0)

00:07:21 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x4, &(0x7f0000000000)) (async)
io_setup(0x4, &(0x7f0000000000)=<r1=>0x0)
pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffc00}])

00:07:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  441.768037][T14463] loop1: detected capacity change from 0 to 64
[  441.786261][T14463] Trying to free block not in datazone
[  441.787590][T14463] Trying to free block not in datazone
[  441.796269][T14463] Trying to free block not in datazone
[  441.797595][T14463] Trying to free block not in datazone
[  441.807202][T14463] minix_free_block (loop1:6): bit already cleared
[  441.811100][T14463] Trying to free block not in datazone
[  441.814658][T14463] Trying to free block not in datazone
[  441.824800][T14451] Injecting memory failure for pfn 0x17f695 at process virtual address 0x20495000
[  441.847705][T14451] Memory failure: 0x17f695: recovery action for dirty LRU page: Recovered
[  441.849793][T14451] Injecting memory failure for pfn 0x182e95 at process virtual address 0x20695000
[  441.874155][T14451] Memory failure: 0x182e95: recovery action for dirty LRU page: Recovered
[  441.914037][T14451] Injecting memory failure for pfn 0x17f660 at process virtual address 0x20460000
[  441.919971][T14451] Memory failure: 0x17f660: recovery action for dirty LRU page: Recovered
[  441.921911][T14451] Injecting memory failure for pfn 0x17f661 at process virtual address 0x20461000
[  441.936717][T14451] Memory failure: 0x17f661: recovery action for dirty LRU page: Recovered
00:07:21 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:21 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20016}], 0x1, 0x1000012, 0x0, 0x0)

00:07:21 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6040000, 0x0)

00:07:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:21 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x1003000, 0x0)

00:07:21 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  442.001398][T14478] loop1: detected capacity change from 0 to 64
[  442.008445][T14479] loop3: detected capacity change from 0 to 64
[  442.036515][T14479] Trying to free block not in datazone
[  442.037906][T14479] Trying to free block not in datazone
[  442.039278][T14479] Trying to free block not in datazone
[  442.043414][T14478] Trying to free block not in datazone
[  442.044703][T14478] Trying to free block not in datazone
[  442.046031][T14478] Trying to free block not in datazone
[  442.047322][T14479] Trying to free block not in datazone
[  442.048624][T14478] Trying to free block not in datazone
[  442.059546][T14479] minix_free_block (loop3:6): bit already cleared
00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20017}], 0x1, 0x1000012, 0x0, 0x0)

[  442.065530][T14478] minix_free_block (loop1:6): bit already cleared
[  442.069825][T14479] Trying to free block not in datazone
00:07:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  442.075466][T14478] Trying to free block not in datazone
00:07:22 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  442.085966][T14479] Trying to free block not in datazone
[  442.092919][T14478] Trying to free block not in datazone
00:07:22 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2000000, 0x0)

00:07:22 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x7000000, 0x0)

00:07:22 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)

[  442.190755][T14495] loop1: detected capacity change from 0 to 64
[  442.212959][T14495] Trying to free block not in datazone
[  442.214309][T14495] Trying to free block not in datazone
[  442.219925][T14495] Trying to free block not in datazone
[  442.221272][T14495] Trying to free block not in datazone
[  442.226245][T14495] minix_free_block (loop1:6): bit already cleared
[  442.227590][T14480] Injecting memory failure for pfn 0x185095 at process virtual address 0x20495000
[  442.236965][T14495] Trying to free block not in datazone
[  442.238289][T14495] Trying to free block not in datazone
[  442.246535][T14480] Memory failure: 0x185095: recovery action for dirty LRU page: Recovered
[  442.248478][T14480] Injecting memory failure for pfn 0x18a295 at process virtual address 0x20695000
[  442.300776][T14480] Memory failure: 0x18a295: recovery action for dirty LRU page: Recovered
[  442.346013][T14480] Injecting memory failure for pfn 0x185060 at process virtual address 0x20460000
[  442.357323][T14480] Memory failure: 0x185060: recovery action for dirty LRU page: Recovered
[  442.359142][T14480] Injecting memory failure for pfn 0x185061 at process virtual address 0x20461000
[  442.367536][T14480] Memory failure: 0x185061: recovery action for dirty LRU page: Recovered
00:07:22 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)

00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20018}], 0x1, 0x1000012, 0x0, 0x0)

00:07:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:22 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x8000000, 0x0)

00:07:22 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x2040000, 0x0)

00:07:22 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10)
pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c)

[  442.408997][T14509] loop3: detected capacity change from 0 to 64
[  442.429956][T14508] loop1: detected capacity change from 0 to 64
[  442.446818][T14508] Trying to free block not in datazone
[  442.448158][T14508] Trying to free block not in datazone
[  442.450210][T14509] Trying to free block not in datazone
[  442.451530][T14509] Trying to free block not in datazone
00:07:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20019}], 0x1, 0x1000012, 0x0, 0x0)

[  442.459605][T14509] Trying to free block not in datazone
[  442.461112][T14508] Trying to free block not in datazone
[  442.462560][T14508] Trying to free block not in datazone
[  442.463870][T14508] minix_free_block (loop1:6): bit already cleared
[  442.465317][T14508] Trying to free block not in datazone
[  442.466635][T14509] Trying to free block not in datazone
[  442.467943][T14509] minix_free_block (loop3:6): bit already cleared
[  442.469687][T14509] Trying to free block not in datazone
[  442.479459][T14508] Trying to free block not in datazone
[  442.481447][T14509] Trying to free block not in datazone
00:07:22 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10)
pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c)

00:07:22 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x3000000, 0x0)

00:07:22 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc000000, 0x0)

00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001a}], 0x1, 0x1000012, 0x0, 0x0)

[  442.591661][T14524] loop1: detected capacity change from 0 to 64
[  442.598661][T14526] loop3: detected capacity change from 0 to 64
[  442.616826][T14524] Trying to free block not in datazone
[  442.618176][T14524] Trying to free block not in datazone
[  442.619668][T14524] Trying to free block not in datazone
[  442.628938][T14526] Trying to free block not in datazone
[  442.630754][T14524] Trying to free block not in datazone
[  442.632078][T14524] minix_free_block (loop1:6): bit already cleared
[  442.633540][T14524] Trying to free block not in datazone
[  442.634765][T14524] Trying to free block not in datazone
[  442.635964][T14526] Trying to free block not in datazone
[  442.637507][T14526] Trying to free block not in datazone
[  442.638675][T14526] Trying to free block not in datazone
[  442.648735][T14526] minix_free_block (loop3:6): bit already cleared
[  442.657127][T14514] Injecting memory failure for pfn 0x188895 at process virtual address 0x20495000
[  442.657332][T14526] Trying to free block not in datazone
[  442.668622][T14526] Trying to free block not in datazone
[  442.688013][T14514] Memory failure: 0x188895: recovery action for dirty LRU page: Recovered
[  442.699880][T14514] Injecting memory failure for pfn 0x18a695 at process virtual address 0x20695000
[  442.720003][T14527] Injecting memory failure for pfn 0x188860 at process virtual address 0x20460000
[  442.726326][T14527] Memory failure: 0x188860: recovery action for dirty LRU page: Recovered
[  442.738691][T14527] Injecting memory failure for pfn 0x188861 at process virtual address 0x20461000
[  442.749479][T14514] Memory failure: 0x18a695: recovery action for dirty LRU page: Recovered
[  442.756516][T14527] Memory failure: 0x188861: recovery action for dirty LRU page: Recovered
00:07:22 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)

00:07:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:22 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10)
pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12}, 0x10) (async)
pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="6ff46abd07d467b1084330653668d35d9ffa5675853d28fe274fbe344cd058951350a51e5ddd15c837a1424bf014d3deaef9fdc283da8cf575026a2cd74af60e50afadf22ca9f4728049bb813e53ecc601e7a91164e2d3c5b9c7ee4bbd7f772f46a832c249571afa4151cc91df1057d52aa9e038885c0e99814b69163abb158a1e54", 0x82}], 0x1, 0x9, 0x40, 0x1c) (async)

00:07:22 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x4000000, 0x0)

00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001b}], 0x1, 0x1000012, 0x0, 0x0)

00:07:22 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe000000, 0x0)

[  442.792551][T14538] loop1: detected capacity change from 0 to 64
[  442.815601][T14538] Trying to free block not in datazone
[  442.819250][T14538] Trying to free block not in datazone
[  442.823288][T14540] loop3: detected capacity change from 0 to 64
[  442.824172][T14538] Trying to free block not in datazone
[  442.836428][T14540] Trying to free block not in datazone
[  442.839007][T14538] Trying to free block not in datazone
[  442.840628][T14540] Trying to free block not in datazone
[  442.844130][T14540] Trying to free block not in datazone
[  442.844655][T14538] minix_free_block (loop1:6): bit already cleared
[  442.846790][T14538] Trying to free block not in datazone
[  442.848029][T14538] Trying to free block not in datazone
[  442.848799][T14540] Trying to free block not in datazone
00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001c}], 0x1, 0x1000012, 0x0, 0x0)

[  442.856351][T14540] minix_free_block (loop3:6): bit already cleared
[  442.867923][T14540] Trying to free block not in datazone
[  442.883850][T14540] Trying to free block not in datazone
00:07:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:22 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x15100, 0x0)
io_setup(0x80000000, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000000)="f76bf523ab4477dc11a849aafbb965c524e5243adc68a36541ec6a3b7a291dccf263ce80e2d3f2c79d321b4c9be959cd05540fce36b75b11a2d66a45ef8437647cb73c05fe6f9e56c828af256d0651db4038ab82bc5506", 0x57, 0x5, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000002c0)="044c9670d359c7b0c53dbd31c9fc3edbc2cc9fc44ee36498bac0f253151596381756087dea00f0801211325de94770036a67674f02713e280d4353dfe4add745706fb5ce991aa015f8d79804781b0c861a9f4f313d892ad13c231b21a22712bdf301e26ae33b98d93b9fc2dd36f7435c126f9af3449263b74931fb1c587d3c66da12e0d475f4b8d7e9147d973b7508542671c2b9ac0d4bca1e3bbf76733d2a36b8e5a42dc9ec9bbfdaf48ec803393b0e78e3aec8b350d8cf3006518d21a8b2eab94c417e463cfdf335d5ab66a4a2b9f62846df418652bf5d38", 0xd9, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7fffffffffffffff}])

00:07:22 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf000000, 0x0)

00:07:22 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6000000, 0x0)

00:07:22 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001d}], 0x1, 0x1000012, 0x0, 0x0)

[  442.992497][T14559] loop3: detected capacity change from 0 to 64
[  443.005014][T14560] loop1: detected capacity change from 0 to 64
[  443.009240][T14559] Trying to free block not in datazone
[  443.016684][T14559] Trying to free block not in datazone
[  443.025798][T14559] Trying to free block not in datazone
[  443.027104][T14559] Trying to free block not in datazone
[  443.027926][T14560] Trying to free block not in datazone
[  443.029817][T14560] Trying to free block not in datazone
[  443.031809][T14560] Trying to free block not in datazone
[  443.033082][T14559] minix_free_block (loop3:6): bit already cleared
[  443.034792][T14543] Injecting memory failure for pfn 0x1ba095 at process virtual address 0x20495000
[  443.038006][T14559] Trying to free block not in datazone
[  443.039468][T14560] Trying to free block not in datazone
[  443.039486][T14560] minix_free_block (loop1:6): bit already cleared
[  443.039504][T14560] Trying to free block not in datazone
[  443.039521][T14560] Trying to free block not in datazone
[  443.060436][T14559] Trying to free block not in datazone
[  443.067332][T14543] Memory failure: 0x1ba095: recovery action for dirty LRU page: Recovered
[  443.094565][T14561] Injecting memory failure for pfn 0x1ba060 at process virtual address 0x20460000
[  443.096556][T14543] Injecting memory failure for pfn 0x1ba295 at process virtual address 0x20695000
[  443.127590][T14543] Memory failure: 0x1ba295: recovery action for dirty LRU page: Recovered
[  443.131734][T14561] Memory failure: 0x1ba060: recovery action for dirty LRU page: Recovered
[  443.133771][T14561] Injecting memory failure for pfn 0x1ba061 at process virtual address 0x20461000
[  443.135915][T14561] Memory failure: 0x1ba061: recovery action for dirty LRU page: Recovered
00:07:23 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
mremap(&(0x7f0000266000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000507000/0x1000)=nil)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)

00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x0, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:23 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r2=>0xffffffffffffffff}) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x15100, 0x0) (async)
io_setup(0x80000000, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000000)="f76bf523ab4477dc11a849aafbb965c524e5243adc68a36541ec6a3b7a291dccf263ce80e2d3f2c79d321b4c9be959cd05540fce36b75b11a2d66a45ef8437647cb73c05fe6f9e56c828af256d0651db4038ab82bc5506", 0x57, 0x5, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000002c0)="044c9670d359c7b0c53dbd31c9fc3edbc2cc9fc44ee36498bac0f253151596381756087dea00f0801211325de94770036a67674f02713e280d4353dfe4add745706fb5ce991aa015f8d79804781b0c861a9f4f313d892ad13c231b21a22712bdf301e26ae33b98d93b9fc2dd36f7435c126f9af3449263b74931fb1c587d3c66da12e0d475f4b8d7e9147d973b7508542671c2b9ac0d4bca1e3bbf76733d2a36b8e5a42dc9ec9bbfdaf48ec803393b0e78e3aec8b350d8cf3006518d21a8b2eab94c417e463cfdf335d5ab66a4a2b9f62846df418652bf5d38", 0xd9, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7fffffffffffffff}])

00:07:23 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6040000, 0x0)

00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2001e}], 0x1, 0x1000012, 0x0, 0x0)

00:07:23 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x11000000, 0x0)

[  443.189269][T14574] loop3: detected capacity change from 0 to 64
[  443.198149][T14573] loop1: detected capacity change from 0 to 64
[  443.209618][T14573] Trying to free block not in datazone
[  443.210130][T14574] Trying to free block not in datazone
[  443.210869][T14573] Trying to free block not in datazone
[  443.211970][T14574] Trying to free block not in datazone
[  443.211982][T14574] Trying to free block not in datazone
[  443.211989][T14574] Trying to free block not in datazone
[  443.211996][T14574] minix_free_block (loop3:6): bit already cleared
[  443.212013][T14574] Trying to free block not in datazone
[  443.219139][T14574] Trying to free block not in datazone
[  443.219441][T14573] Trying to free block not in datazone
[  443.229054][T14573] Trying to free block not in datazone
[  443.235576][T14573] minix_free_block (loop1:6): bit already cleared
[  443.240612][T14573] Trying to free block not in datazone
[  443.244945][T14573] Trying to free block not in datazone
00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20021}], 0x1, 0x1000012, 0x0, 0x0)

00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:23 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x8000000, 0x0)

00:07:23 executing program 5:
io_setup(0x9, &(0x7f0000000280)) (async)
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x15100, 0x0)
io_setup(0x80000000, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000000)="f76bf523ab4477dc11a849aafbb965c524e5243adc68a36541ec6a3b7a291dccf263ce80e2d3f2c79d321b4c9be959cd05540fce36b75b11a2d66a45ef8437647cb73c05fe6f9e56c828af256d0651db4038ab82bc5506", 0x57, 0x5, 0x0, 0x3, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000002c0)="044c9670d359c7b0c53dbd31c9fc3edbc2cc9fc44ee36498bac0f253151596381756087dea00f0801211325de94770036a67674f02713e280d4353dfe4add745706fb5ce991aa015f8d79804781b0c861a9f4f313d892ad13c231b21a22712bdf301e26ae33b98d93b9fc2dd36f7435c126f9af3449263b74931fb1c587d3c66da12e0d475f4b8d7e9147d973b7508542671c2b9ac0d4bca1e3bbf76733d2a36b8e5a42dc9ec9bbfdaf48ec803393b0e78e3aec8b350d8cf3006518d21a8b2eab94c417e463cfdf335d5ab66a4a2b9f62846df418652bf5d38", 0xd9, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7fffffffffffffff}])

00:07:23 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x12000000, 0x0)

[  443.348246][T14583] Injecting memory failure for pfn 0x1ba695 at process virtual address 0x20495000
[  443.353962][T14591] loop1: detected capacity change from 0 to 64
00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20041}], 0x1, 0x1000012, 0x0, 0x0)

[  443.366356][T14597] loop3: detected capacity change from 0 to 64
[  443.370420][T14591] Trying to free block not in datazone
[  443.381892][T14591] Trying to free block not in datazone
[  443.383128][T14591] Trying to free block not in datazone
[  443.384340][T14591] Trying to free block not in datazone
[  443.385640][T14591] minix_free_block (loop1:6): bit already cleared
[  443.387035][T14591] Trying to free block not in datazone
[  443.388298][T14591] Trying to free block not in datazone
[  443.396898][T14583] Memory failure: 0x1ba695: recovery action for dirty LRU page: Recovered
[  443.404674][T14597] Trying to free block not in datazone
[  443.406046][T14597] Trying to free block not in datazone
[  443.407448][T14597] Trying to free block not in datazone
[  443.414166][T14589] Injecting memory failure for pfn 0x1ba660 at process virtual address 0x20460000
[  443.420452][T14597] Trying to free block not in datazone
[  443.421783][T14597] minix_free_block (loop3:6): bit already cleared
[  443.423313][T14597] Trying to free block not in datazone
[  443.426796][T14583] Injecting memory failure for pfn 0x1ba895 at process virtual address 0x20695000
[  443.432746][T14589] Memory failure: 0x1ba660: recovery action for dirty LRU page: Recovered
[  443.437306][T14589] Injecting memory failure for pfn 0x1ba661 at process virtual address 0x20461000
[  443.440237][T14597] Trying to free block not in datazone
[  443.507143][T14583] Memory failure: 0x1ba895: recovery action for dirty LRU page: Recovered
[  443.517714][T14589] Memory failure: 0x1ba661: recovery action for dirty LRU page: Recovered
00:07:23 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:23 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xc000000, 0x0)

00:07:23 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x20000000, 0x0)

00:07:23 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x9e896000)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r5 = dup(r4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x0, &(0x7f0000000680))
r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r7, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r9 = dup(r8)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000600)="794df3939191ff153fc840897ab4a72e98d3c7dbb2ff", 0x16}], 0x1, 0x9, 0x1)
io_submit(r0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="5e50f29345c9e89e662af7245be66a62599832b5a2ee9029f7ae166c883706eb58be225ab866e65ab72e99e44228e3ee9420449e44fbda84432b63c4a2082f01be25c5163f78f15f1cf9913668cece595d6bab777cdf5c28a7b4fed38dac43932acf18", 0x63, 0x6, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3a89, r3, &(0x7f0000000140)="d2a4a4e465577a26db3182d30ed825e57f1c78f03f01774b4089671f8611f88fbe2392affcea0cc0c4d47562bc67f33876c061f872172402f4d64d49c9406dcbb408b80e3acf9e12ed1d0378f3dc9b0e0856e381110acd5a41cc66", 0x5b, 0x81, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="e2329cb974689eeaa81fa805427ea7f5d3f73f79f24d79472b8783fde2cb2df9cbb10b87b68d6bf1d8a92322347ceb25cef1f558ac1c30868a4f5899fd393721bb402eb0bd1ad6fa467ac29decba2c196e09892e5a9b80917b92a08b4e0e33f38ab1bb19fd56797ee41fd3b7cb6ebd8fa7eff318a85aca0fc192ae3176913efad1413289d229a1a54dab4de967c3198444bf6c87e62ddbf24c707ddf87e9dcc0f96ba20328c56cddae3b96b66b01ce78fe5acc50745f5c84bd76d086ac5a494c8ab8e0da6eadc9c7c79d9eade7e60872ff102ffc6047f9afe445538e5351", 0xde, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="1d10cfd8710c3e28539584465c1ecc558cae7a18457df1a6216a194cfe52f51dad9673917e47fce3dfc1b76e442b6994408a743a337f3719660f16f2a26ce9b26508c1e2a07d55277bf7c16d28d8000346bbffac5d6dbb9a273cc8b67b615d048ce250a6e629db868d410623f3390c81b7", 0x71, 0x3f, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="b9373a7be9a8776e8560042c6dee05c292ab1212bc8cfc50e12a101d824021e6ce0e3ab3d81fc79e82ca3efbd1b5d35be7669dbc1df6f512aaf35bb46ab83735e5d1c2bff91d197ff914ba4158ce016d9968f4f2881439bc546125eb9bc83a6ed25d272e3517c21c31ee00fefca0bc7ea775d9ea7d2329e363e17628cd74681b8282", 0x82, 0x3f, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, r7, &(0x7f0000000500)="b2bd0540ebec1b48d5c606fb5c25636e3cd862008c665a3ef44e5891bd8eb8acc3534bc83528d0fca974bbbc036181c9ef4609a058fbb8f9", 0x38, 0x129e, 0x0, 0x3, r9}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r10 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
io_destroy(0x0)

00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20091}], 0x1, 0x1000012, 0x0, 0x0)

[  443.585328][T14611] loop1: detected capacity change from 0 to 64
[  443.592099][T14610] loop3: detected capacity change from 0 to 64
00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20110}], 0x1, 0x1000012, 0x0, 0x0)

[  443.620520][T14611] Trying to free block not in datazone
[  443.621825][T14611] Trying to free block not in datazone
[  443.623543][T14610] Trying to free block not in datazone
[  443.624861][T14610] Trying to free block not in datazone
00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  443.626313][T14610] Trying to free block not in datazone
[  443.627736][T14611] Trying to free block not in datazone
[  443.629267][T14611] Trying to free block not in datazone
[  443.631081][T14610] Trying to free block not in datazone
[  443.633487][T14611] minix_free_block (loop1:6): bit already cleared
[  443.635058][T14610] minix_free_block (loop3:6): bit already cleared
[  443.639950][T14611] Trying to free block not in datazone
[  443.643529][T14610] Trying to free block not in datazone
[  443.645951][T14611] Trying to free block not in datazone
[  443.647278][T14610] Trying to free block not in datazone
00:07:23 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x9e896000) (async, rerun: 32)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r5 = dup(r4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
io_submit(r0, 0x0, &(0x7f0000000680)) (async)
r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r7, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r9 = dup(r8)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000600)="794df3939191ff153fc840897ab4a72e98d3c7dbb2ff", 0x16}], 0x1, 0x9, 0x1) (async)
io_submit(r0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="5e50f29345c9e89e662af7245be66a62599832b5a2ee9029f7ae166c883706eb58be225ab866e65ab72e99e44228e3ee9420449e44fbda84432b63c4a2082f01be25c5163f78f15f1cf9913668cece595d6bab777cdf5c28a7b4fed38dac43932acf18", 0x63, 0x6, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3a89, r3, &(0x7f0000000140)="d2a4a4e465577a26db3182d30ed825e57f1c78f03f01774b4089671f8611f88fbe2392affcea0cc0c4d47562bc67f33876c061f872172402f4d64d49c9406dcbb408b80e3acf9e12ed1d0378f3dc9b0e0856e381110acd5a41cc66", 0x5b, 0x81, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="e2329cb974689eeaa81fa805427ea7f5d3f73f79f24d79472b8783fde2cb2df9cbb10b87b68d6bf1d8a92322347ceb25cef1f558ac1c30868a4f5899fd393721bb402eb0bd1ad6fa467ac29decba2c196e09892e5a9b80917b92a08b4e0e33f38ab1bb19fd56797ee41fd3b7cb6ebd8fa7eff318a85aca0fc192ae3176913efad1413289d229a1a54dab4de967c3198444bf6c87e62ddbf24c707ddf87e9dcc0f96ba20328c56cddae3b96b66b01ce78fe5acc50745f5c84bd76d086ac5a494c8ab8e0da6eadc9c7c79d9eade7e60872ff102ffc6047f9afe445538e5351", 0xde, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="1d10cfd8710c3e28539584465c1ecc558cae7a18457df1a6216a194cfe52f51dad9673917e47fce3dfc1b76e442b6994408a743a337f3719660f16f2a26ce9b26508c1e2a07d55277bf7c16d28d8000346bbffac5d6dbb9a273cc8b67b615d048ce250a6e629db868d410623f3390c81b7", 0x71, 0x3f, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="b9373a7be9a8776e8560042c6dee05c292ab1212bc8cfc50e12a101d824021e6ce0e3ab3d81fc79e82ca3efbd1b5d35be7669dbc1df6f512aaf35bb46ab83735e5d1c2bff91d197ff914ba4158ce016d9968f4f2881439bc546125eb9bc83a6ed25d272e3517c21c31ee00fefca0bc7ea775d9ea7d2329e363e17628cd74681b8282", 0x82, 0x3f, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, r7, &(0x7f0000000500)="b2bd0540ebec1b48d5c606fb5c25636e3cd862008c665a3ef44e5891bd8eb8acc3534bc83528d0fca974bbbc036181c9ef4609a058fbb8f9", 0x38, 0x129e, 0x0, 0x3, r9}]) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r10 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
io_destroy(0x0)

00:07:23 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000000, 0x0)

00:07:23 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe000000, 0x0)

00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  443.744616][T14613] Injecting memory failure for pfn 0x181a95 at process virtual address 0x20495000
[  443.778299][T14613] Memory failure: 0x181a95: recovery action for dirty LRU page: Recovered
[  443.782034][T14631] loop3: detected capacity change from 0 to 64
[  443.784470][T14613] Injecting memory failure for pfn 0x1baa95 at process virtual address 0x20695000
[  443.801385][T14632] loop1: detected capacity change from 0 to 64
[  443.804123][T14631] Trying to free block not in datazone
[  443.805313][T14631] Trying to free block not in datazone
[  443.806396][T14631] Trying to free block not in datazone
[  443.807575][T14631] Trying to free block not in datazone
[  443.808693][T14631] minix_free_block (loop3:6): bit already cleared
[  443.813470][T14632] Trying to free block not in datazone
[  443.815001][T14632] Trying to free block not in datazone
[  443.817467][T14632] Trying to free block not in datazone
[  443.818835][T14632] Trying to free block not in datazone
[  443.820838][T14613] Memory failure: 0x1baa95: recovery action for dirty LRU page: Recovered
[  443.831204][T14632] minix_free_block (loop1:6): bit already cleared
[  443.835012][T14632] Trying to free block not in datazone
[  443.838653][T14632] Trying to free block not in datazone
[  443.841268][T14613] Injecting memory failure for pfn 0x181a60 at process virtual address 0x20460000
[  443.843346][T14631] Trying to free block not in datazone
[  443.844494][T14631] Trying to free block not in datazone
[  443.847732][T14613] Memory failure: 0x181a60: recovery action for dirty LRU page: Recovered
[  443.856677][T14613] Injecting memory failure for pfn 0x181a61 at process virtual address 0x20461000
[  443.863822][T14613] Memory failure: 0x181a61: recovery action for dirty LRU page: Recovered
00:07:23 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20204}], 0x1, 0x1000012, 0x0, 0x0)

00:07:23 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x9e896000) (async)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r5 = dup(r4)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
io_submit(r0, 0x0, &(0x7f0000000680))
r6 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r6, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
r7 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r7, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r9 = dup(r8)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
pwritev(r5, &(0x7f0000000640)=[{&(0x7f0000000600)="794df3939191ff153fc840897ab4a72e98d3c7dbb2ff", 0x16}], 0x1, 0x9, 0x1) (async)
io_submit(r0, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="5e50f29345c9e89e662af7245be66a62599832b5a2ee9029f7ae166c883706eb58be225ab866e65ab72e99e44228e3ee9420449e44fbda84432b63c4a2082f01be25c5163f78f15f1cf9913668cece595d6bab777cdf5c28a7b4fed38dac43932acf18", 0x63, 0x6, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3a89, r3, &(0x7f0000000140)="d2a4a4e465577a26db3182d30ed825e57f1c78f03f01774b4089671f8611f88fbe2392affcea0cc0c4d47562bc67f33876c061f872172402f4d64d49c9406dcbb408b80e3acf9e12ed1d0378f3dc9b0e0856e381110acd5a41cc66", 0x5b, 0x81, 0x0, 0x4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="e2329cb974689eeaa81fa805427ea7f5d3f73f79f24d79472b8783fde2cb2df9cbb10b87b68d6bf1d8a92322347ceb25cef1f558ac1c30868a4f5899fd393721bb402eb0bd1ad6fa467ac29decba2c196e09892e5a9b80917b92a08b4e0e33f38ab1bb19fd56797ee41fd3b7cb6ebd8fa7eff318a85aca0fc192ae3176913efad1413289d229a1a54dab4de967c3198444bf6c87e62ddbf24c707ddf87e9dcc0f96ba20328c56cddae3b96b66b01ce78fe5acc50745f5c84bd76d086ac5a494c8ab8e0da6eadc9c7c79d9eade7e60872ff102ffc6047f9afe445538e5351", 0xde, 0x1ff, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="1d10cfd8710c3e28539584465c1ecc558cae7a18457df1a6216a194cfe52f51dad9673917e47fce3dfc1b76e442b6994408a743a337f3719660f16f2a26ce9b26508c1e2a07d55277bf7c16d28d8000346bbffac5d6dbb9a273cc8b67b615d048ce250a6e629db868d410623f3390c81b7", 0x71, 0x3f, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="b9373a7be9a8776e8560042c6dee05c292ab1212bc8cfc50e12a101d824021e6ce0e3ab3d81fc79e82ca3efbd1b5d35be7669dbc1df6f512aaf35bb46ab83735e5d1c2bff91d197ff914ba4158ce016d9968f4f2881439bc546125eb9bc83a6ed25d272e3517c21c31ee00fefca0bc7ea775d9ea7d2329e363e17628cd74681b8282", 0x82, 0x3f, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80, r7, &(0x7f0000000500)="b2bd0540ebec1b48d5c606fb5c25636e3cd862008c665a3ef44e5891bd8eb8acc3534bc83528d0fca974bbbc036181c9ef4609a058fbb8f9", 0x38, 0x129e, 0x0, 0x3, r9}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r10 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
io_destroy(0x0)

00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:23 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf000000, 0x0)

00:07:23 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x41000000, 0x0)

[  443.936121][T14645] loop1: detected capacity change from 0 to 64
[  443.942741][T14643] loop3: detected capacity change from 0 to 64
[  443.960066][T14643] Trying to free block not in datazone
[  443.961507][T14643] Trying to free block not in datazone
[  443.962884][T14643] Trying to free block not in datazone
[  443.979863][T14645] Trying to free block not in datazone
00:07:23 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20300}], 0x1, 0x1000012, 0x0, 0x0)

[  443.981219][T14645] Trying to free block not in datazone
[  443.982832][T14645] Trying to free block not in datazone
[  443.989790][T14643] Trying to free block not in datazone
[  443.990961][T14643] minix_free_block (loop3:6): bit already cleared
[  443.992219][T14643] Trying to free block not in datazone
[  443.993397][T14643] Trying to free block not in datazone
[  443.994972][T14645] Trying to free block not in datazone
00:07:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:23 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5f19, r1, &(0x7f0000000040)="4c43a27bd2cc1b88cf3fb8dab485583f6f49dafd2232a46d7a29afc054551c79744e7da54d7133d83d4cc3b58ef080ad2bc51c04c3ea29aad76fc531ac670d3c6eda77776b421c6f24e39a625c400e913eaf4ce705b859fcb7a77e0f5c74", 0x5e, 0x9, 0x0, 0x6}])
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
shutdown(r3, 0x0)

[  444.022466][T14645] minix_free_block (loop1:6): bit already cleared
[  444.023915][T14645] Trying to free block not in datazone
[  444.034754][T14645] Trying to free block not in datazone
00:07:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x6f010000, 0x0)

00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20402}], 0x1, 0x1000012, 0x0, 0x0)

00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  444.163581][T14650] Injecting memory failure for pfn 0x1ba495 at process virtual address 0x20495000
[  444.163853][T14666] loop3: detected capacity change from 0 to 64
[  444.184856][T14666] Trying to free block not in datazone
[  444.189599][T14666] Trying to free block not in datazone
[  444.192639][T14666] Trying to free block not in datazone
[  444.195338][T14650] Memory failure: 0x1ba495: recovery action for dirty LRU page: Recovered
[  444.197412][T14650] Injecting memory failure for pfn 0x188e95 at process virtual address 0x20695000
[  444.208975][T14666] Trying to free block not in datazone
[  444.211458][T14666] minix_free_block (loop3:6): bit already cleared
[  444.212851][T14666] Trying to free block not in datazone
[  444.214129][T14666] Trying to free block not in datazone
[  444.229072][T14660] Injecting memory failure for pfn 0x1ba460 at process virtual address 0x20460000
[  444.233035][T14650] Memory failure: 0x188e95: recovery action for dirty LRU page: Recovered
[  444.235372][T14660] Memory failure: 0x1ba460: recovery action for dirty LRU page: Recovered
[  444.237277][T14660] Injecting memory failure for pfn 0x1ba461 at process virtual address 0x20461000
[  444.251343][T14660] Memory failure: 0x1ba461: recovery action for dirty LRU page: Recovered
00:07:24 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5f19, r1, &(0x7f0000000040)="4c43a27bd2cc1b88cf3fb8dab485583f6f49dafd2232a46d7a29afc054551c79744e7da54d7133d83d4cc3b58ef080ad2bc51c04c3ea29aad76fc531ac670d3c6eda77776b421c6f24e39a625c400e913eaf4ce705b859fcb7a77e0f5c74", 0x5e, 0x9, 0x0, 0x6}]) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
shutdown(r3, 0x0)

00:07:24 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x11000000, 0x0)

00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:24 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20406}], 0x1, 0x1000012, 0x0, 0x0)

00:07:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf5ffffff, 0x0)

[  444.287942][T14672] loop1: detected capacity change from 0 to 64
[  444.311374][T14672] Trying to free block not in datazone
[  444.315048][T14672] Trying to free block not in datazone
[  444.318666][T14672] Trying to free block not in datazone
[  444.323584][T14672] Trying to free block not in datazone
[  444.326107][T14672] minix_free_block (loop1:6): bit already cleared
[  444.333169][T14672] Trying to free block not in datazone
[  444.336236][T14681] loop3: detected capacity change from 0 to 64
[  444.342435][T14672] Trying to free block not in datazone
00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20500}], 0x1, 0x1000012, 0x0, 0x0)

00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  444.364689][T14681] Trying to free block not in datazone
00:07:24 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x12000000, 0x0)

00:07:24 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5f19, r1, &(0x7f0000000040)="4c43a27bd2cc1b88cf3fb8dab485583f6f49dafd2232a46d7a29afc054551c79744e7da54d7133d83d4cc3b58ef080ad2bc51c04c3ea29aad76fc531ac670d3c6eda77776b421c6f24e39a625c400e913eaf4ce705b859fcb7a77e0f5c74", 0x5e, 0x9, 0x0, 0x6}]) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
shutdown(r3, 0x0)

[  444.399806][T14681] Trying to free block not in datazone
[  444.419596][T14681] Trying to free block not in datazone
[  444.420827][T14681] Trying to free block not in datazone
[  444.421996][T14681] Trying to free block not in datazone
[  444.447416][T14681] Trying to free block not in datazone
[  444.452005][T14692] loop1: detected capacity change from 0 to 64
[  444.468994][T14692] Trying to free block not in datazone
[  444.471663][T14692] Trying to free block not in datazone
00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  444.473216][T14692] Trying to free block not in datazone
[  444.474677][T14692] Trying to free block not in datazone
00:07:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfbffffff, 0x0)

[  444.476010][T14692] minix_free_block (loop1:6): bit already cleared
[  444.477657][T14692] Trying to free block not in datazone
[  444.479181][T14692] Trying to free block not in datazone
[  444.485597][T14693] Injecting memory failure for pfn 0x1bae95 at process virtual address 0x20495000
00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20600}], 0x1, 0x1000012, 0x0, 0x0)

[  444.507585][T14693] Memory failure: 0x1bae95: recovery action for dirty LRU page: Recovered
00:07:24 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x20000000, 0x0)

[  444.514394][T14693] Injecting memory failure for pfn 0x1bb095 at process virtual address 0x20695000
[  444.534807][T14698] loop3: detected capacity change from 0 to 64
[  444.562528][T14698] Trying to free block not in datazone
[  444.563969][T14698] Trying to free block not in datazone
[  444.565264][T14698] Trying to free block not in datazone
[  444.569729][T14698] Trying to free block not in datazone
[  444.574531][T14698] minix_free_block (loop3:6): bit already cleared
[  444.576313][T14680] Injecting memory failure for pfn 0x1bae60 at process virtual address 0x20460000
[  444.580869][T14698] Trying to free block not in datazone
[  444.585022][T14698] Trying to free block not in datazone
[  444.594277][T14693] Memory failure: 0x1bb095: recovery action for dirty LRU page: Recovered
00:07:24 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x80000000, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  444.609900][T14680] Memory failure: 0x1bae60: recovery action for dirty LRU page: Recovered
[  444.612166][T14680] Injecting memory failure for pfn 0x1bae61 at process virtual address 0x20461000
00:07:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f0000, 0x0)

[  444.640647][T14704] loop1: detected capacity change from 0 to 64
[  444.646955][T14680] Memory failure: 0x1bae61: recovery action for dirty LRU page: Recovered
[  444.662569][T14704] Trying to free block not in datazone
[  444.663898][T14704] Trying to free block not in datazone
[  444.665215][T14704] Trying to free block not in datazone
[  444.666475][T14704] Trying to free block not in datazone
[  444.667827][T14704] minix_free_block (loop1:6): bit already cleared
[  444.679448][T14704] Trying to free block not in datazone
[  444.680676][T14704] Trying to free block not in datazone
00:07:24 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20604}], 0x1, 0x1000012, 0x0, 0x0)

[  444.709464][T14712] loop3: detected capacity change from 0 to 64
00:07:24 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x40000000, 0x0)

00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:24 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async, rerun: 64)
io_setup(0x80000000, &(0x7f0000000000)) (async, rerun: 64)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  444.744682][T14712] Trying to free block not in datazone
[  444.746054][T14712] Trying to free block not in datazone
[  444.759533][T14712] Trying to free block not in datazone
[  444.760836][T14712] Trying to free block not in datazone
[  444.762108][T14712] minix_free_block (loop3:6): bit already cleared
[  444.773921][T14712] Trying to free block not in datazone
[  444.775215][T14712] Trying to free block not in datazone
00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20700}], 0x1, 0x1000012, 0x0, 0x0)

00:07:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffff5, 0x0)

[  444.827945][T14724] loop1: detected capacity change from 0 to 64
00:07:24 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0x80000000, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_setup(0x80000000, &(0x7f0000000000)) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)

[  444.858064][T14724] Trying to free block not in datazone
[  444.862857][T14724] Trying to free block not in datazone
[  444.865412][T14724] Trying to free block not in datazone
[  444.867383][T14724] Trying to free block not in datazone
00:07:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  444.886659][T14724] minix_free_block (loop1:6): bit already cleared
[  444.893563][T14724] Trying to free block not in datazone
[  444.896222][T14729] loop3: detected capacity change from 0 to 64
00:07:24 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20900}], 0x1, 0x1000012, 0x0, 0x0)

[  444.908816][T14724] Trying to free block not in datazone
[  444.909197][T14729] Trying to free block not in datazone
[  444.911501][T14729] Trying to free block not in datazone
[  444.913956][T14729] Trying to free block not in datazone
[  444.916468][T14729] Trying to free block not in datazone
[  444.919010][T14729] minix_free_block (loop3:6): bit already cleared
[  444.930255][T14721] Injecting memory failure for pfn 0x188695 at process virtual address 0x20495000
[  444.934753][T14729] Trying to free block not in datazone
[  444.938391][T14729] Trying to free block not in datazone
00:07:24 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x41000000, 0x0)

[  444.961690][T14721] Memory failure: 0x188695: recovery action for dirty LRU page: Recovered
[  444.967057][T14721] Injecting memory failure for pfn 0x1bb295 at process virtual address 0x20695000
00:07:24 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffffb, 0x0)

[  444.982021][T14727] Injecting memory failure for pfn 0x188660 at process virtual address 0x20460000
[  444.991208][T14727] Memory failure: 0x188660: recovery action for dirty LRU page: Recovered
[  444.997512][T14727] Injecting memory failure for pfn 0x188661 at process virtual address 0x20461000
[  445.019139][T14742] loop1: detected capacity change from 0 to 64
[  445.037427][T14742] Trying to free block not in datazone
[  445.050726][T14742] Trying to free block not in datazone
[  445.051947][T14742] Trying to free block not in datazone
[  445.054515][T14721] Memory failure: 0x1bb295: recovery action for dirty LRU page: Recovered
[  445.066424][T14727] Memory failure: 0x188661: recovery action for dirty LRU page: Recovered
[  445.070565][T14744] loop3: detected capacity change from 0 to 64
[  445.072992][T14742] Trying to free block not in datazone
[  445.074284][T14742] minix_free_block (loop1:6): bit already cleared
[  445.075660][T14742] Trying to free block not in datazone
[  445.077027][T14742] Trying to free block not in datazone
[  445.092300][T14744] Trying to free block not in datazone
[  445.093463][T14744] Trying to free block not in datazone
[  445.094620][T14744] Trying to free block not in datazone
[  445.095753][T14744] Trying to free block not in datazone
[  445.096855][T14744] minix_free_block (loop3:6): bit already cleared
[  445.098214][T14744] Trying to free block not in datazone
[  445.103432][T14744] Trying to free block not in datazone
00:07:25 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:25 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
io_setup(0x9, &(0x7f0000000240)=<r3=>0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}])
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}})
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0)

00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20a00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:25 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x70010000, 0x0)

00:07:25 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x2)

00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20b00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  445.238236][T14755] Injecting memory failure for pfn 0x1bb495 at process virtual address 0x20495000
[  445.240907][T14762] loop3: detected capacity change from 0 to 64
00:07:25 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xd3990300, 0x0)

[  445.261585][T14762] Trying to free block not in datazone
[  445.267585][T14762] Trying to free block not in datazone
[  445.271798][T14762] Trying to free block not in datazone
[  445.274472][T14762] Trying to free block not in datazone
[  445.275974][T14755] Memory failure: 0x1bb495: recovery action for dirty LRU page: Recovered
[  445.283532][T14755] Injecting memory failure for pfn 0x1bb695 at process virtual address 0x20695000
00:07:25 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
io_setup(0x9, &(0x7f0000000240)=<r3=>0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}])
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}})
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
dup(r1) (async)
io_setup(0x9, &(0x7f0000000240)) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) (async)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) (async)

[  445.291372][T14762] minix_free_block (loop3:6): bit already cleared
00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20c00}], 0x1, 0x1000012, 0x0, 0x0)

[  445.296303][T14762] Trying to free block not in datazone
[  445.299970][T14762] Trying to free block not in datazone
[  445.301936][T14765] Injecting memory failure for pfn 0x1bb460 at process virtual address 0x20460000
[  445.335367][T14770] loop1: detected capacity change from 0 to 64
[  445.339679][T14755] Memory failure: 0x1bb695: recovery action for dirty LRU page: Recovered
00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  445.344981][T14765] Memory failure: 0x1bb460: recovery action for dirty LRU page: Recovered
[  445.346848][T14765] Injecting memory failure for pfn 0x1bb461 at process virtual address 0x20461000
[  445.358492][T14770] Trying to free block not in datazone
[  445.370473][T14770] Trying to free block not in datazone
[  445.371697][T14770] Trying to free block not in datazone
[  445.372842][T14770] Trying to free block not in datazone
[  445.374016][T14770] minix_free_block (loop1:6): bit already cleared
[  445.375387][T14770] Trying to free block not in datazone
[  445.376588][T14770] Trying to free block not in datazone
[  445.378917][T14765] Memory failure: 0x1bb461: recovery action for dirty LRU page: Recovered
00:07:25 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=<r1=>0xffffffffffffffff)
mmap(&(0x7f0000542000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0xeb0b6000)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:25 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x3)

00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20d00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:25 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xe0990300, 0x0)

[  445.458879][T14783] loop3: detected capacity change from 0 to 64
00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:25 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
io_setup(0x9, &(0x7f0000000240)=<r3=>0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}])
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}})
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
dup(r1) (async)
io_setup(0x9, &(0x7f0000000240)) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @empty, 0x674b3697}}, 0x24) (async)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8001, r2, &(0x7f0000000080)="b9fd13771460d0bac3f3fcf6a882fd2f1ac2968ee94b1e777706f8", 0x1b, 0x5, 0x0, 0x2, r2}]) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x0) (async)

[  445.504830][T14783] Trying to free block not in datazone
[  445.506204][T14783] Trying to free block not in datazone
[  445.507417][T14783] Trying to free block not in datazone
[  445.508688][T14783] Trying to free block not in datazone
[  445.515683][T14789] loop1: detected capacity change from 0 to 64
00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20e00}], 0x1, 0x1000012, 0x0, 0x0)

[  445.521776][T14783] minix_free_block (loop3:6): bit already cleared
[  445.523264][T14783] Trying to free block not in datazone
[  445.524538][T14783] Trying to free block not in datazone
[  445.561112][T14789] Trying to free block not in datazone
[  445.568001][T14789] Trying to free block not in datazone
[  445.569229][T14789] Trying to free block not in datazone
00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  445.582381][T14789] Trying to free block not in datazone
00:07:25 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4)

[  445.587614][T14789] minix_free_block (loop1:6): bit already cleared
[  445.592811][T14789] Trying to free block not in datazone
[  445.594069][T14789] Trying to free block not in datazone
[  445.608707][T14787] Injecting memory failure for pfn 0x1bb895 at process virtual address 0x20495000
00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20f00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:25 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xf5ffffff, 0x0)

[  445.652585][T14810] loop3: detected capacity change from 0 to 64
[  445.653838][T14787] Memory failure: 0x1bb895: recovery action for dirty LRU page: Recovered
[  445.656244][T14787] Injecting memory failure for pfn 0x1bba95 at process virtual address 0x20695000
[  445.663920][T14795] Injecting memory failure for pfn 0x1bb860 at process virtual address 0x20460000
[  445.671849][T14795] Memory failure: 0x1bb860: recovery action for dirty LRU page: Recovered
[  445.676003][T14795] Injecting memory failure for pfn 0x1bb861 at process virtual address 0x20461000
00:07:25 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x226080, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8118, 0x410000)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x8004391)
write(r2, &(0x7f0000000180)="4ef17249ff18aabd4ca55c65da72b13b1cf4c624e5d12cd11cf85de15701623929e78f52c67842b29d1dc80efe758a409038b455bfe983d35a7deb5215f1320f843f8b55ccb480b1ceebda6a8b4b830eda6f2381e15b88514a3629d85c589a575a54e66d762069fcff44b0c5ebfd796a9325cbde2ce236175ce0dc", 0x7b)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f00000002c0)="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", 0x1000, 0x0, 0x0, 0x0, r3}])
io_destroy(r0)
io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  445.707439][T14810] Trying to free block not in datazone
[  445.708672][T14810] Trying to free block not in datazone
[  445.714617][T14810] Trying to free block not in datazone
[  445.720334][T14810] Trying to free block not in datazone
[  445.726117][T14810] minix_free_block (loop3:6): bit already cleared
[  445.732140][T14810] Trying to free block not in datazone
[  445.735368][T14816] loop1: detected capacity change from 0 to 64
[  445.736854][T14810] Trying to free block not in datazone
[  445.739073][T14787] Memory failure: 0x1bba95: recovery action for dirty LRU page: Recovered
[  445.748697][T14795] Memory failure: 0x1bb861: recovery action for dirty LRU page: Recovered
[  445.748718][T14816] Trying to free block not in datazone
[  445.760061][T14816] Trying to free block not in datazone
[  445.763681][T14816] Trying to free block not in datazone
[  445.766138][T14816] Trying to free block not in datazone
[  445.767939][T14816] minix_free_block (loop1:6): bit already cleared
[  445.774284][T14816] Trying to free block not in datazone
[  445.777803][T14816] Trying to free block not in datazone
00:07:25 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040))
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20fee}], 0x1, 0x1000012, 0x0, 0x0)

00:07:25 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x5)

00:07:25 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x226080, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8118, 0x410000)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x8004391) (async)
write(r2, &(0x7f0000000180)="4ef17249ff18aabd4ca55c65da72b13b1cf4c624e5d12cd11cf85de15701623929e78f52c67842b29d1dc80efe758a409038b455bfe983d35a7deb5215f1320f843f8b55ccb480b1ceebda6a8b4b830eda6f2381e15b88514a3629d85c589a575a54e66d762069fcff44b0c5ebfd796a9325cbde2ce236175ce0dc", 0x7b)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f00000002c0)="862782fcf13017d5459f4769f75cb990bc89c3b64f93925d8acc84d5bee8df646b4cb9b0080333adb7e991e6963fa61c50e944621ead57d4ecab7d53c485f2a2f887379c779abf0cceb5d01024a095cf68b326532d3a57f6ab63569348d52f4895539e3cc31d5ea1f41790a023ecad68fca9b2a2fe11d29861a5b58df7882517accc626b83f7102c4b31e5153b2661049d7de90af36ecdf52ccd5961ddfcd11795b17e6e00a3fcee2f1eeeddf742383718f83c05771c3a56b9f3e771d3f103b7287f5b4cf6638e55d3d32ba63972f4d105cb6b9ab14d31a0f8ebe91b7ab76de7dfc8770334aea6075ed1373f897f2b34692505f2ce4ac95c8173d0e15585ea25589dd9e478d8dccfdd93b6d2f92b03c6503ab5503abcd41bb1233adbbe673bb687b2a1114e56c5939c2de2f623beb254e7ff09538d3bb0630291c3acf006e5038a190a7a9e7806dfda04efa2f4d74b769f08e307ddc10bc25e5b39c3495852d5330c83e06c20fac686cee27865a5f720950d007d1618a75c70c044d7601ca493479a5575aa03e923735c36c61033a2e34846bfd6aea85932492b17e61e3a6cd472de3c2332f91919936267dfe977a284369a2f2889b9a01065437ebe98ba35342ec07b3a3591ded1e5a33e05e94bf8fcc2e76e3a951f2f8e4df6612fa2b10bfac27f33cb8247240bf487f531f0232b293c7003581ea309b434353f93df5949c398e85836719d6c8b8a8c15957f9d374e6e785ecf7f689e6a1acba388ee558fa79349f542d694d8d6d27d28b1379d55d958c175abfd87f00de5b2ea7de602d222a47ff488bdc5cbc3ab8b1e55e5b7dfb6c236f7cd05a20b6740ca229d7b5691d29d2204d538f4975162a6c4312002e80e5ff7c3d274fe7d84930aa4a0614509636c4fbe098049c65e4501a7db170738f47c8bfd742302d7d5cef1b0fa4c03d59a6a80e336706eb528e81a3b3c87b409d48898326a5d8af0c47ceaf6afb519c037d7d4d7f345e85b9528f5e4a1ab462331dee0637a4c072a40779a30358e0e62a4c82453f232a54c7bbf320b9c5603b6a977ac8a263a503c50d84ee9d32dc13ac1dabadf03fb1b9139d2221236d5179161bcd5edd052acf3257e72fee98783545fcecac554330ebe713d4571dcfae3279472fee4a6900734d0c2bb98a269a48434a2cfc5aa5aa48e4ede1df273fc12363b47a971c3d286224c377b6c74dacfdd37539b1b70a5e171e9faf69d1bc97f1ce20c53733e910d1049749c8183985bb96fc10009122839921ab17500c75f1399f06276a34b4431adc9ef09ad97e1fd0ac30d86059bec29e1b2d9be93a4d2987975a24e87c0f87c31138322de8594d98a3de10b799e8a575076935f635b54ad395645d852ed0cec44cb556dcd45be4fd96bcc34560e7d352b9d9cad61416930f1abea88fa029a8bd896a6d71929d7c2d82887b3cfbd205369d0b23f2dd34bd046715b0ae369bd9c2bf77c50e1abf10a4cc022370f2361317dd9c8bd77e7347f8017463c045a74629c0b679f74148e06ddea14a6ca67eeb4122958b8ed88c594cec0a5a628e34d6358c2831db0d1cd46d5ce23a0dfe3603e12acd84d10ec11111d4cb0b16b9bd8444b8bb59e7f8b705826b02c029649d269e4e3c69d4eb820ee35123137ab0699194677cc9bf3e6ca31363d7057fe611110f558540e5e934ec1b3ccfa05540b3ef891227cfb5c0efa646a1798a723c0b58fcd94ba4853fe877de8e934a4deed9d08dce4803700c4a05e10a6a604e1d236d24b8accfd48e54cf64356f6c9a87910540bfa8f4ca8ae443fcb5c2ccdbe6b704fb3c0b0e214a0dde19761c0b91e2d471018e6baa8efe3ec0b071e4532fd2952183154ed61f28cf2153c2ba186b15c2a8c71f573f9f305f59723483c9a2f3600c0de5c3d733ccb1845af54969ecc04b72b04eb77418b1a4a0055a97b84a923ffdf9c2ae5965485e95ea791a41170328f5464911fd736976f6670ec1675069ea996b589d1267b796f98ed99af10a92651073aa69f5f40b75da423d8e1f6e105aa27682594bf0feff9006d7de7e21ad1e8335c2cd4c18238622cf806681575f9ecb0e28c181917268d1746776b0be5b5cdc5d841303bcbeb5a40eda9e93db607272f228e5a81ff60d73a4f731c4a502603e49c3b937a942ae257b951ddfc6495a3f207e4b822f07b46beb46dabb48eb7e8a26337e28e67a979671e786d3a57a8859887ab461d03449026624df6971f0a1596e387c1bba6b0dbcc80085ff7942f91552a0ea3d53a5c36e7420ed1369cc9c2d9568433569c148df16d3608665bed5720fcb72ba514d6ea9171b0b35eee66bf2ad7197bc6424690351fcac9b434d2630d2d2d4f96be6b16ef7db7291ad07b0146a11d28463a0a7f4c82023f797798da6430935f8ce7064c2c65c87e09da2f6902eaec434591dc35cfcf911ec6c57b0ffae0357ae4ad944a8078a9b8d4b04e3d383b972a98a4887fb4c8727a0155b71fb1a99fdf7ff4ebda90521ee095444f206ea6ef2a4d68c9910d78bfcb1aab6136f83cf049f20de3eb9624b3573107a38d341583e01531ebdfb1d54d14ce744346b5361d7f358def266151531d4b27f4b1617c08e346e1a4a2a0cc0851d86a56dd6121b08409a0f3a71f2277d10870a5849c4fb95a4c837e9c01446edc90a20d197599076748f67af525522ef02793a3fe7007b65f1b8801e2f2afb7e3b187407ef17ec47b6d53345bcd61c0507a105f5ed502a126429cb4023a38ba515851d13cdfa2df906511524f2fa118a10c7e2fc4df50a7d4eba73206a1d5e04d282dd90e062dcf8297cb7a3bdd6073a28ff854d0748cff0db17c1dfbba6c8e1fbf735ae5f3c10dbea61113206c4d77832327a6be5a5848fe1f365190fd693415c29bef7788933bae393d61cafe8b5fa2e5eb9395932510b1cc2b6f0fe49d8dc9cd2bf45370c02d9cf83bbf0226284158fa8441091ff767594a21e72f130b3a91d4524f23d3efd689e3a6b9def214e852a1fe6d3a799cb52a1834834b6071ff74369d13978b8108db4bc7ca3d506fef236a478baf7dad7c95cff170e2139dc06847d0183b851b4ed3635f18284540a54f02bb9dd76278407f221e2f01dcd6c0b7e5aaa1b589e3a676619fd39c45490af0ed2213aa9364d6352d799f44bd65a97efdf9d64fc0967b4ce9c291c37852883f3c8eec04e620a896c5dd5bb05aa82a27d7625c62fda2db96cc1c930d797196a9ef3a74a08710ea54f8b09160a26f8df1fbbc020beeedb7d5e625827df6c6e73ef0f104f26274d6803f167330998faa256761fb8e76c9a0f55f6075f0888d56617a1b692c8f07ebc54180ba73ca98a242adb2a3f3b2bed6e64d36fc788232ecd0d52473bdcac31924f1ac38c756b2df03fe0335667769e6a738fc1f197014c8307cda2a47ac0e621d0c36a77b139e84be97ae8d40e59b2cb123be17d13367bb0c903c817ab88dfe94b50802b9f44d917eb95998fef812fc4a2015c54e2353a8c8278a2e3e05423ef2fae03bd4e0b4259a93fa3b89449acc1e2ca86ec496ec55d111a0f7465777f696d4eba484722f353ac67c0ddd83aa9b16e9fa3929111af9a53837c131659fc91e33801fce4633c3eefac176544366a150654b00c001bb10996f2a80e15b95c1a27c182c2452d7140f6bc9ff0b1f32f76e4bba5151910d323a1ebc31701b76d751727c5b2f5c17ac15d5d4015cee9cc592d754a027c1421cc66a5470fd4bfbbcf61d9fc7f9e1b648ae6bc49bfc500671536153773753b554c5ef9298c98c871bb2d2a80b04b6fdde955b702d9a08daaa5a59cb38cda354f67e42d9b7ad384df477d30bee2bdd6ef88f5fdf6054698e16e13b6ee6f4cddda0337c2793129bae3c147ea36126c023c7de663a22b9c00e1d89bac41d8c44d0d790e11eaab936c0309b109c8a826257559da12adb7d61a54a5af6ec13e9c4187f38f664546f56c32abd3519fb15ffd2d2df4fd9ec4a150b162abe061d64175024b0100e6b09b91a9ccec9058fbe26ab3a0e92467a4177d7e2ab640edca476db16509e58cee52bc8c9bd4ca76bacf9bc350a9d7b1e2f12f60da36d058ad5a1f3c09c504975886dd9f0be4269b543964e3317826c5f5fea03d0a21ba01cbdc0c8f5389f70b6fe712786b169d48410c7fddbbb26eb200f932c7d7b13479894920c5f58b1c49dbca2f4a0ebdb133f03664697a330e5cc6a6b0f3341adcf83705ec93fcdb3d29c2a1783b2088e74353da7ade19f36b28e0a7b825575119ebcd13b895343b99082cfc7222b2abf6140302ac88e6e3e6f5f90546272535a286dbeea1d63e6d922a4940a603a0062f8a60837569638918f634d81520d4ad3fa671f69a79bf9697d18f18c53fe100afadbfe193deab8ab4c97b0a48639c87738c926aa7c7c4cae8a8cd1b86d6db69609924fd4ac15ddcdab365190c6deb2b785d17cc7f3616d415eac83cedb1540248dd3d00864e1bb5ec69eb9ef0e29560a432ab6fea7e7a341024dbbf5aca64cbb47c46f95d4d861029f7bd6306995d26cbb25161efa38fa78585b3b856a7deff86f77f5ab3f22342db2218b59688678407b3a0045820c02f8a1e31865280551e075c96527a678aa924fcfed3189d7145c05ab88f3fb72d031cf7c1a929735281d1ca273ce191eafb4e62b8baa727d85f6f72fe4852147d048f61c98dd49d9455e48534b2de2adc2c53a760e222142766e49ed73e5d889136025a1fefbbe678bed34212842308601348b36d8ffaadcb8d528861fcef0cecbd65605cd70d422496401bb2c7d00191d768a07ee7703c763a3aaf3566753e40c41211b8c15ba8413cbb39bd04f99d2b0472ea9c28fe406d44741f1eb212c15f2c9c9d058d38cddf25b9a02506238b57ae9bb43c592d7580a5a97eb3b4bac2576b9d085a69ef926e17ad7671fd25304d57596876e32920eebf5824419e86cdc727ea23b8e644926c9e1f5bfd14e79998f6e5801ce1c35cb21f1fd33892e1cde171a494d4014b73b40e8e0167386cfb799bb52de0f460f134870b6b1357f2e72d07451a2ce7f4a5e589835fb952a1cc577b6146088a7118b8715e2b9b2156cb0619462658e92d52ad1eaa4869420c677c0c5ee301d815133782aaa065cb196743f92b75bfefb2bd59b191558b1e85c5f0c3a36e65a2fe3287c71d2c0a549e0e6f33f1a1e124fb2032a5c49b22aadfe8c769ba46e9dde2205580e33d20478ea923c2e5f1f36158df511ce233f0b280be4c03e617a75de0c54542b25c1acccde846405758dfc33008eee14ece7c0e86189f222f021166d7dacdd664b542e1233c14634221a564a48d33278c9534c7dca273a391d5c2b9d8da0310c0bacbe79361cdb91bc13f77bc2818668b66dc85e067de0b7951f7ea9a98aa8fc0ef7356dbfc92ff1168d647ac4ff0bb8e7ab5c74a1629f8396ddfb3605c39fd4d3364017371ebd199a2dc5b0ad626cfcde47e0588d1643b06350961869ea86d7952d7a909397a9904209c2b4b6795195cc1dd476d0452925bd42057078b1cb9348f9ddd22f2ca70357cfc4a3092886c4c51ded87f7a3ab2db62941339228727349bd98033611ed9b3da36a5b46aef28d305c1435feecc7c864381fe0f145cb3955430dfbf6d7bb17442eeb490055b856e6523eade6fcfbee0c6405fffb63319807434f13cc6dcb143e7c37d0f2917891011ca3c8e5e40874dde4aa3b501c1a736ab4747992bcf1040a752fb77b80fccb0f5c0ef72eb00596d582a5ced3cddc1e54f2b874837d37b13c3cbe78cf8a047f632dc9897295", 0x1000, 0x0, 0x0, 0x0, r3}])
io_destroy(r0) (async)
io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:25 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfbffffff, 0x0)

[  445.852305][T14826] loop3: detected capacity change from 0 to 64
00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21001}], 0x1, 0x1000012, 0x0, 0x0)

[  445.886228][T14826] Trying to free block not in datazone
[  445.887578][T14826] Trying to free block not in datazone
[  445.895749][T14826] Trying to free block not in datazone
[  445.897034][T14826] Trying to free block not in datazone
[  445.898328][T14826] minix_free_block (loop3:6): bit already cleared
[  445.909475][T14826] Trying to free block not in datazone
[  445.910742][T14826] Trying to free block not in datazone
[  445.923743][T14835] loop1: detected capacity change from 0 to 64
[  445.948698][T14835] Trying to free block not in datazone
[  445.955044][T14835] Trying to free block not in datazone
[  445.958651][T14835] Trying to free block not in datazone
00:07:25 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x6)

00:07:25 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x226080, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8118, 0x410000)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x8004391) (async)
write(r2, &(0x7f0000000180)="4ef17249ff18aabd4ca55c65da72b13b1cf4c624e5d12cd11cf85de15701623929e78f52c67842b29d1dc80efe758a409038b455bfe983d35a7deb5215f1320f843f8b55ccb480b1ceebda6a8b4b830eda6f2381e15b88514a3629d85c589a575a54e66d762069fcff44b0c5ebfd796a9325cbde2ce236175ce0dc", 0x7b) (async)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x100, r1, &(0x7f00000002c0)="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", 0x1000, 0x0, 0x0, 0x0, r3}]) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:25 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21100}], 0x1, 0x1000012, 0x0, 0x0)

[  445.980468][T14835] Trying to free block not in datazone
[  445.981715][T14835] minix_free_block (loop1:6): bit already cleared
00:07:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  445.986734][T14830] Injecting memory failure for pfn 0x1bbc95 at process virtual address 0x20495000
[  445.991267][T14835] Trying to free block not in datazone
[  445.999612][T14835] Trying to free block not in datazone
[  446.022735][T14830] Memory failure: 0x1bbc95: recovery action for dirty LRU page: Recovered
[  446.027849][T14830] Injecting memory failure for pfn 0x1bbe95 at process virtual address 0x20695000
[  446.043528][T14847] loop3: detected capacity change from 0 to 64
[  446.051577][T14847] Trying to free block not in datazone
[  446.053314][T14847] Trying to free block not in datazone
[  446.062882][T14847] Trying to free block not in datazone
[  446.064039][T14830] Memory failure: 0x1bbe95: recovery action for dirty LRU page: Recovered
[  446.071055][T14847] Trying to free block not in datazone
[  446.079058][T14847] minix_free_block (loop3:6): bit already cleared
[  446.085843][T14847] Trying to free block not in datazone
[  446.088569][T14847] Trying to free block not in datazone
[  446.088788][T14830] Injecting memory failure for pfn 0x1bbc60 at process virtual address 0x20460000
[  446.095936][T14830] Memory failure: 0x1bbc60: recovery action for dirty LRU page: Recovered
[  446.107080][T14830] Injecting memory failure for pfn 0x1bbc61 at process virtual address 0x20461000
[  446.137598][T14830] Memory failure: 0x1bbc61: recovery action for dirty LRU page: Recovered
00:07:26 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:26 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xff0f0000, 0x0)

00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21200}], 0x1, 0x1000012, 0x0, 0x0)

00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:26 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:26 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x7)

[  446.186840][T14859] loop3: detected capacity change from 0 to 64
[  446.197253][T14861] loop1: detected capacity change from 0 to 64
[  446.217420][T14859] Trying to free block not in datazone
[  446.218710][T14859] Trying to free block not in datazone
[  446.229776][T14859] Trying to free block not in datazone
[  446.231003][T14859] Trying to free block not in datazone
[  446.232243][T14859] minix_free_block (loop3:6): bit already cleared
[  446.238047][T14861] Trying to free block not in datazone
00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21300}], 0x1, 0x1000012, 0x0, 0x0)

[  446.242289][T14861] Trying to free block not in datazone
[  446.243949][T14859] Trying to free block not in datazone
00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  446.248304][T14861] Trying to free block not in datazone
[  446.254035][T14861] Trying to free block not in datazone
[  446.257165][T14859] Trying to free block not in datazone
[  446.258817][T14861] minix_free_block (loop1:6): bit already cleared
[  446.263115][T14861] Trying to free block not in datazone
[  446.265574][T14861] Trying to free block not in datazone
00:07:26 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_destroy(r0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:26 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x8)

00:07:26 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffff5, 0x0)

00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21400}], 0x1, 0x1000012, 0x0, 0x0)

[  446.369031][T14864] Injecting memory failure for pfn 0x1bc295 at process virtual address 0x20495000
[  446.377501][T14876] loop3: detected capacity change from 0 to 64
[  446.392862][T14876] Trying to free block not in datazone
[  446.394129][T14876] Trying to free block not in datazone
[  446.399268][T14878] loop1: detected capacity change from 0 to 64
[  446.402047][T14864] Memory failure: 0x1bc295: recovery action for dirty LRU page: Recovered
[  446.404085][T14876] Trying to free block not in datazone
[  446.405421][T14876] Trying to free block not in datazone
[  446.406736][T14876] minix_free_block (loop3:6): bit already cleared
[  446.410298][T14864] Injecting memory failure for pfn 0x1bac95 at process virtual address 0x20695000
[  446.416956][T14876] Trying to free block not in datazone
[  446.418286][T14876] Trying to free block not in datazone
[  446.436156][T14878] Trying to free block not in datazone
[  446.437426][T14878] Trying to free block not in datazone
[  446.438728][T14878] Trying to free block not in datazone
[  446.441114][T14878] Trying to free block not in datazone
[  446.442375][T14878] minix_free_block (loop1:6): bit already cleared
[  446.443961][T14878] Trying to free block not in datazone
[  446.445217][T14878] Trying to free block not in datazone
[  446.491978][T14882] Injecting memory failure for pfn 0x1bc260 at process virtual address 0x20460000
[  446.494677][T14864] Memory failure: 0x1bac95: recovery action for dirty LRU page: Recovered
[  446.501195][T14882] Memory failure: 0x1bc260: recovery action for dirty LRU page: Recovered
[  446.503028][T14882] Injecting memory failure for pfn 0x1bc261 at process virtual address 0x20461000
[  446.505103][T14882] Memory failure: 0x1bc261: recovery action for dirty LRU page: Recovered
00:07:26 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:26 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc)

00:07:26 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0xfffffffb, 0x0)

00:07:26 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21500}], 0x1, 0x1000012, 0x0, 0x0)

[  446.558369][T14890] loop3: detected capacity change from 0 to 64
[  446.561785][T14891] loop1: detected capacity change from 0 to 64
[  446.578263][T14891] Trying to free block not in datazone
[  446.580143][T14891] Trying to free block not in datazone
[  446.581327][T14891] Trying to free block not in datazone
[  446.584685][T14890] Trying to free block not in datazone
[  446.589043][T14891] Trying to free block not in datazone
[  446.592790][T14890] Trying to free block not in datazone
[  446.596350][T14890] Trying to free block not in datazone
[  446.598773][T14891] minix_free_block (loop1:6): bit already cleared
[  446.604600][T14890] Trying to free block not in datazone
[  446.608296][T14891] Trying to free block not in datazone
[  446.609842][T14890] minix_free_block (loop3:6): bit already cleared
00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21600}], 0x1, 0x1000012, 0x0, 0x0)

[  446.616204][T14891] Trying to free block not in datazone
[  446.618575][T14890] Trying to free block not in datazone
[  446.622517][T14890] Trying to free block not in datazone
00:07:26 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)="f92242cd3c54d2ce1a968cd7b18d41c20b221876ad5b36c44dc3d5b5cbab2f1a775675e4f178d27b89e28d7a8334398933af10291af9bc79f0fc200abec55fc2f9dfffba2e2010a68ab30547e6e174dd7640d29d5dbe23268b9e8937fa870900a6bbc4280824dd37992a2bb55638c200bc095557fa44fa8c63d7e9c0d963adaf555f0abbe3106a6e4d27ecfb419a7ea0cfd1", 0x92, 0x8, 0x0, 0x3, r3}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:26 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x2)

00:07:26 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe)

[  446.712315][T14896] Injecting memory failure for pfn 0x1bc695 at process virtual address 0x20495000
00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21700}], 0x1, 0x1000012, 0x0, 0x0)

00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:26 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)="f92242cd3c54d2ce1a968cd7b18d41c20b221876ad5b36c44dc3d5b5cbab2f1a775675e4f178d27b89e28d7a8334398933af10291af9bc79f0fc200abec55fc2f9dfffba2e2010a68ab30547e6e174dd7640d29d5dbe23268b9e8937fa870900a6bbc4280824dd37992a2bb55638c200bc095557fa44fa8c63d7e9c0d963adaf555f0abbe3106a6e4d27ecfb419a7ea0cfd1", 0x92, 0x8, 0x0, 0x3, r3}]) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  446.757407][T14907] loop1: detected capacity change from 0 to 64
[  446.760469][T14909] loop3: detected capacity change from 0 to 64
[  446.773011][T14907] Trying to free block not in datazone
[  446.774307][T14907] Trying to free block not in datazone
[  446.775590][T14907] Trying to free block not in datazone
[  446.778033][T14909] Trying to free block not in datazone
[  446.779272][T14909] Trying to free block not in datazone
[  446.785786][T14907] Trying to free block not in datazone
[  446.787071][T14907] minix_free_block (loop1:6): bit already cleared
[  446.788474][T14907] Trying to free block not in datazone
[  446.789190][T14896] Memory failure: 0x1bc695: recovery action for dirty LRU page: Recovered
[  446.790337][T14909] Trying to free block not in datazone
[  446.793192][T14909] Trying to free block not in datazone
[  446.798798][T14896] Injecting memory failure for pfn 0x1bc895 at process virtual address 0x20695000
[  446.798903][T14907] Trying to free block not in datazone
[  446.802451][T14909] minix_free_block (loop3:6): bit already cleared
[  446.803907][T14909] Trying to free block not in datazone
[  446.805158][T14909] Trying to free block not in datazone
00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21800}], 0x1, 0x1000012, 0x0, 0x0)

[  446.890146][T14896] Memory failure: 0x1bc895: recovery action for dirty LRU page: Recovered
[  446.896806][T14923] Injecting memory failure for pfn 0x1bc660 at process virtual address 0x20460000
[  446.919941][T14923] Memory failure: 0x1bc660: recovery action for dirty LRU page: Recovered
[  446.921741][T14923] Injecting memory failure for pfn 0x1bc661 at process virtual address 0x20461000
[  446.939557][T14923] Memory failure: 0x1bc661: recovery action for dirty LRU page: Recovered
00:07:26 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf)

00:07:26 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x3)

00:07:26 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_destroy(r0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
dup(r2) (async)
r3 = dup(r2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)="f92242cd3c54d2ce1a968cd7b18d41c20b221876ad5b36c44dc3d5b5cbab2f1a775675e4f178d27b89e28d7a8334398933af10291af9bc79f0fc200abec55fc2f9dfffba2e2010a68ab30547e6e174dd7640d29d5dbe23268b9e8937fa870900a6bbc4280824dd37992a2bb55638c200bc095557fa44fa8c63d7e9c0d963adaf555f0abbe3106a6e4d27ecfb419a7ea0cfd1", 0x92, 0x8, 0x0, 0x3, r3}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:26 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21900}], 0x1, 0x1000012, 0x0, 0x0)

00:07:26 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  447.005248][T14933] loop1: detected capacity change from 0 to 64
[  447.008024][T14936] loop3: detected capacity change from 0 to 64
00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21a00}], 0x1, 0x1000012, 0x0, 0x0)

[  447.023498][T14933] Trying to free block not in datazone
[  447.024914][T14933] Trying to free block not in datazone
[  447.030150][T14933] Trying to free block not in datazone
[  447.033802][T14933] Trying to free block not in datazone
[  447.036270][T14933] minix_free_block (loop1:6): bit already cleared
[  447.043414][T14936] Trying to free block not in datazone
[  447.044739][T14936] Trying to free block not in datazone
[  447.045977][T14936] Trying to free block not in datazone
[  447.047279][T14936] Trying to free block not in datazone
[  447.050222][T14933] Trying to free block not in datazone
[  447.052705][T14936] minix_free_block (loop3:6): bit already cleared
[  447.054497][T14933] Trying to free block not in datazone
[  447.056991][T14936] Trying to free block not in datazone
[  447.061746][T14936] Trying to free block not in datazone
00:07:27 executing program 5:
io_setup(0x80, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = dup(r3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000})
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0)

00:07:27 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x10)

00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:27 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4)

00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21b00}], 0x1, 0x1000012, 0x0, 0x0)

[  447.154375][T14947] loop3: detected capacity change from 0 to 64
[  447.168825][T14947] Trying to free block not in datazone
[  447.174647][T14947] Trying to free block not in datazone
[  447.179286][T14947] Trying to free block not in datazone
[  447.181553][T14947] Trying to free block not in datazone
00:07:27 executing program 5:
io_setup(0x80, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1) (async)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = dup(r3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000})
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0)

[  447.191143][T14947] minix_free_block (loop3:6): bit already cleared
00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  447.197326][T14947] Trying to free block not in datazone
[  447.201376][T14947] Trying to free block not in datazone
00:07:27 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x6)

00:07:27 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x11)

[  447.277238][T14963] loop1: detected capacity change from 0 to 64
00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21c00}], 0x1, 0x1000012, 0x0, 0x0)

[  447.284208][T14938] Injecting memory failure for pfn 0x1bca60 at process virtual address 0x20460000
[  447.295200][T14963] Trying to free block not in datazone
[  447.302294][T14963] Trying to free block not in datazone
[  447.304377][T14964] loop3: detected capacity change from 0 to 64
[  447.306991][T14963] Trying to free block not in datazone
[  447.308578][T14938] Memory failure: 0x1bca60: recovery action for dirty LRU page: Recovered
[  447.311956][T14963] Trying to free block not in datazone
[  447.314639][T14963] minix_free_block (loop1:6): bit already cleared
[  447.318156][T14963] Trying to free block not in datazone
[  447.321058][T14964] Trying to free block not in datazone
[  447.323033][T14963] Trying to free block not in datazone
[  447.324326][T14964] Trying to free block not in datazone
[  447.327412][T14964] Trying to free block not in datazone
[  447.338659][T14964] Trying to free block not in datazone
[  447.344285][T14964] minix_free_block (loop3:6): bit already cleared
[  447.345782][T14964] Trying to free block not in datazone
[  447.346992][T14964] Trying to free block not in datazone
00:07:27 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:27 executing program 5:
io_setup(0x80, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r4 = dup(r3)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000})
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0)
io_setup(0x80, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
dup(r1) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
dup(r3) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x5, 0xd21c, 0x80, 0x4000}) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0) (async)

00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:27 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x8)

00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21d00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:27 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x12)

[  447.434928][T14982] loop1: detected capacity change from 0 to 64
00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  447.468932][T14982] Trying to free block not in datazone
[  447.471346][T14982] Trying to free block not in datazone
[  447.472631][T14982] Trying to free block not in datazone
[  447.481817][T14986] loop3: detected capacity change from 0 to 64
[  447.485704][T14982] Trying to free block not in datazone
[  447.487013][T14982] minix_free_block (loop1:6): bit already cleared
00:07:27 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3f, r1, &(0x7f0000000000)="e0fd53722d1c4d12dbb17e8396810091f1008bed5fd3eb626bb13f062987734f4fd437279c28649e107d32152a62b47de3379c3fb3229351d2a9fa865ed7aac856c4707ec11607ddf7223c0a703b532efdd9dd3b7dbcccab28d9ad808215d8a424e544cf1b40def1528b590b", 0x6c, 0x2}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  447.497538][T14986] Trying to free block not in datazone
[  447.498858][T14986] Trying to free block not in datazone
[  447.503632][T14982] Trying to free block not in datazone
[  447.506084][T14986] Trying to free block not in datazone
[  447.508614][T14982] Trying to free block not in datazone
[  447.510326][T14986] Trying to free block not in datazone
[  447.513385][T14986] minix_free_block (loop3:6): bit already cleared
[  447.516484][T14986] Trying to free block not in datazone
[  447.520517][T14986] Trying to free block not in datazone
00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21e00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:27 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc)

00:07:27 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x41)

00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  447.583436][T14972] Injecting memory failure for pfn 0x1bd060 at process virtual address 0x20460000
[  447.604792][T14998] loop1: detected capacity change from 0 to 64
[  447.621115][T15000] loop3: detected capacity change from 0 to 64
[  447.628159][T14998] Trying to free block not in datazone
[  447.631279][T14998] Trying to free block not in datazone
[  447.632536][T14998] Trying to free block not in datazone
[  447.633877][T14998] Trying to free block not in datazone
[  447.636375][T14998] minix_free_block (loop1:6): bit already cleared
[  447.640048][T14998] Trying to free block not in datazone
[  447.641295][T14972] Memory failure: 0x1bd060: recovery action for dirty LRU page: Recovered
[  447.657614][T15000] Trying to free block not in datazone
[  447.661449][T14998] Trying to free block not in datazone
[  447.663405][T15000] Trying to free block not in datazone
[  447.664737][T15000] Trying to free block not in datazone
[  447.665962][T15000] Trying to free block not in datazone
[  447.667217][T15000] minix_free_block (loop3:6): bit already cleared
[  447.670407][T15000] Trying to free block not in datazone
00:07:27 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x21f00}], 0x1, 0x1000012, 0x0, 0x0)

00:07:27 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3f, r1, &(0x7f0000000000)="e0fd53722d1c4d12dbb17e8396810091f1008bed5fd3eb626bb13f062987734f4fd437279c28649e107d32152a62b47de3379c3fb3229351d2a9fa865ed7aac856c4707ec11607ddf7223c0a703b532efdd9dd3b7dbcccab28d9ad808215d8a424e544cf1b40def1528b590b", 0x6c, 0x2}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  447.705035][T15000] Trying to free block not in datazone
00:07:27 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe)

00:07:27 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x16f)

00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x22000}], 0x1, 0x1000012, 0x0, 0x0)

00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  447.815393][T15017] loop1: detected capacity change from 0 to 64
[  447.826442][T15018] loop3: detected capacity change from 0 to 64
[  447.846458][T15017] Trying to free block not in datazone
[  447.858390][T15018] Trying to free block not in datazone
[  447.859965][T15018] Trying to free block not in datazone
00:07:27 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x22100}], 0x1, 0x1000012, 0x0, 0x0)

[  447.863442][T15018] Trying to free block not in datazone
[  447.864945][T15018] Trying to free block not in datazone
[  447.868566][T15018] minix_free_block (loop3:6): bit already cleared
[  447.873848][T15018] Trying to free block not in datazone
[  447.877435][T15018] Trying to free block not in datazone
[  447.879669][T15017] Trying to free block not in datazone
[  447.880790][T15017] Trying to free block not in datazone
[  447.881959][T15017] Trying to free block not in datazone
[  447.883188][T15017] minix_free_block (loop1:6): bit already cleared
00:07:27 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r1, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3f, r1, &(0x7f0000000000)="e0fd53722d1c4d12dbb17e8396810091f1008bed5fd3eb626bb13f062987734f4fd437279c28649e107d32152a62b47de3379c3fb3229351d2a9fa865ed7aac856c4707ec11607ddf7223c0a703b532efdd9dd3b7dbcccab28d9ad808215d8a424e544cf1b40def1528b590b", 0x6c, 0x2}]) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  447.884481][T15017] Trying to free block not in datazone
[  447.885662][T15017] Trying to free block not in datazone
[  447.896987][T15010] Injecting memory failure for pfn 0x1bc060 at process virtual address 0x20460000
00:07:27 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x204)

00:07:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:27 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf)

[  447.977927][T15010] Memory failure: 0x1bc060: recovery action for dirty LRU page: Recovered
[  448.001110][T15034] loop3: detected capacity change from 0 to 64
[  448.032133][T15034] Trying to free block not in datazone
[  448.036800][T15034] Trying to free block not in datazone
[  448.040951][T15034] Trying to free block not in datazone
[  448.050504][T15034] Trying to free block not in datazone
[  448.051669][T15034] minix_free_block (loop3:6): bit already cleared
[  448.053080][T15034] Trying to free block not in datazone
00:07:28 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x24000}], 0x1, 0x1000012, 0x0, 0x0)

00:07:28 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0xffff, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:28 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:28 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x10)

[  448.073985][T15034] Trying to free block not in datazone
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:28 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x300)

00:07:28 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x24100}], 0x1, 0x1000012, 0x0, 0x0)

[  448.134032][T15045] loop1: detected capacity change from 0 to 64
[  448.167222][T15045] Trying to free block not in datazone
[  448.181318][T15045] Trying to free block not in datazone
[  448.185953][T15045] Trying to free block not in datazone
[  448.189215][T15045] Trying to free block not in datazone
[  448.193024][T15045] minix_free_block (loop1:6): bit already cleared
[  448.194498][T15045] Trying to free block not in datazone
[  448.209542][T15045] Trying to free block not in datazone
[  448.210936][T15042] Injecting memory failure for pfn 0x1bc495 at process virtual address 0x20495000
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  448.237179][T15051] loop3: detected capacity change from 0 to 64
00:07:28 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x29100}], 0x1, 0x1000012, 0x0, 0x0)

00:07:28 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x11)

[  448.244662][T15042] Memory failure: 0x1bc495: recovery action for dirty LRU page: Recovered
[  448.255969][T15042] Injecting memory failure for pfn 0x1bd495 at process virtual address 0x20695000
[  448.257590][T15051] Trying to free block not in datazone
[  448.259207][T15051] Trying to free block not in datazone
00:07:28 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0xffff, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_setup(0xffff, &(0x7f0000000000)) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)

[  448.285661][T15051] Trying to free block not in datazone
[  448.292675][T15051] Trying to free block not in datazone
[  448.299288][T15057] loop1: detected capacity change from 0 to 64
[  448.300545][T15051] minix_free_block (loop3:6): bit already cleared
[  448.307939][T15051] Trying to free block not in datazone
[  448.317760][T15057] Trying to free block not in datazone
[  448.319111][T15057] Trying to free block not in datazone
[  448.327031][T15051] Trying to free block not in datazone
[  448.334168][T15057] Trying to free block not in datazone
[  448.338252][T15042] Memory failure: 0x1bd495: recovery action for dirty LRU page: Recovered
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  448.342165][T15062] Injecting memory failure for pfn 0x1bc460 at process virtual address 0x20460000
[  448.345150][T15062] Memory failure: 0x1bc460: recovery action for dirty LRU page: Recovered
[  448.347269][T15062] Injecting memory failure for pfn 0x1bc461 at process virtual address 0x20461000
[  448.350019][T15057] Trying to free block not in datazone
[  448.351308][T15057] minix_free_block (loop1:6): bit already cleared
[  448.352984][T15062] Memory failure: 0x1bc461: recovery action for dirty LRU page: Recovered
[  448.360061][T15057] Trying to free block not in datazone
[  448.361352][T15057] Trying to free block not in datazone
00:07:28 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x402)

00:07:28 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2ee0f}], 0x1, 0x1000012, 0x0, 0x0)

00:07:28 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x12)

00:07:28 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  448.456570][T15073] loop3: detected capacity change from 0 to 64
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  448.492456][T15073] Trying to free block not in datazone
[  448.493709][T15073] Trying to free block not in datazone
[  448.495049][T15073] Trying to free block not in datazone
[  448.510140][T15076] loop1: detected capacity change from 0 to 64
[  448.519010][T15073] Trying to free block not in datazone
[  448.521345][T15073] minix_free_block (loop3:6): bit already cleared
[  448.522842][T15073] Trying to free block not in datazone
00:07:28 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x2ff0f}], 0x1, 0x1000012, 0x0, 0x0)

[  448.547875][T15076] Trying to free block not in datazone
[  448.549061][T15076] Trying to free block not in datazone
[  448.563136][T15073] Trying to free block not in datazone
[  448.564507][T15076] Trying to free block not in datazone
[  448.567512][T15075] Injecting memory failure for pfn 0x1bcc95 at process virtual address 0x20495000
[  448.569270][T15076] Trying to free block not in datazone
[  448.572198][T15076] minix_free_block (loop1:6): bit already cleared
00:07:28 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x406)

[  448.580432][T15076] Trying to free block not in datazone
[  448.581728][T15076] Trying to free block not in datazone
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  448.611806][T15075] Memory failure: 0x1bcc95: recovery action for dirty LRU page: Recovered
00:07:28 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x41)

[  448.628845][T15085] loop3: detected capacity change from 0 to 64
[  448.632221][T15075] Injecting memory failure for pfn 0x1bd695 at process virtual address 0x20695000
[  448.648925][T15085] Trying to free block not in datazone
[  448.654978][T15085] Trying to free block not in datazone
[  448.663063][T15085] Trying to free block not in datazone
[  448.665568][T15085] Trying to free block not in datazone
00:07:28 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x7ffff000}], 0x1, 0x1000012, 0x0, 0x0)

[  448.682781][T15091] loop1: detected capacity change from 0 to 64
00:07:28 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0xffff, &(0x7f0000000000))
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
io_setup(0xffff, &(0x7f0000000000)) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)

[  448.690799][T15085] minix_free_block (loop3:6): bit already cleared
[  448.692222][T15085] Trying to free block not in datazone
[  448.693423][T15085] Trying to free block not in datazone
[  448.700805][T15086] Injecting memory failure for pfn 0x1bcc60 at process virtual address 0x20460000
[  448.704117][T15075] Memory failure: 0x1bd695: recovery action for dirty LRU page: Recovered
[  448.718328][T15091] Trying to free block not in datazone
[  448.721975][T15091] Trying to free block not in datazone
[  448.723266][T15091] Trying to free block not in datazone
00:07:28 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x500)

[  448.747055][T15091] Trying to free block not in datazone
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  448.757792][T15091] minix_free_block (loop1:6): bit already cleared
[  448.759289][T15091] Trying to free block not in datazone
[  448.762878][T15086] Memory failure: 0x1bcc60: recovery action for dirty LRU page: Recovered
[  448.766281][T15086] Injecting memory failure for pfn 0x1bcc61 at process virtual address 0x20461000
[  448.775758][T15091] Trying to free block not in datazone
[  448.779110][T15086] Memory failure: 0x1bcc61: recovery action for dirty LRU page: Recovered
00:07:28 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x170)

[  448.813101][T15100] loop3: detected capacity change from 0 to 64
00:07:28 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  448.861596][T15100] Trying to free block not in datazone
[  448.862873][T15100] Trying to free block not in datazone
[  448.864260][T15100] Trying to free block not in datazone
[  448.865486][T15100] Trying to free block not in datazone
[  448.866757][T15100] minix_free_block (loop3:6): bit already cleared
00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  448.898975][T15105] loop1: detected capacity change from 0 to 64
[  448.900996][T15100] Trying to free block not in datazone
[  448.902295][T15100] Trying to free block not in datazone
[  448.916368][T15105] Trying to free block not in datazone
[  448.921804][T15105] Trying to free block not in datazone
[  448.925394][T15105] Trying to free block not in datazone
[  448.928410][T15105] Trying to free block not in datazone
00:07:28 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x600)

[  448.939633][T15105] minix_free_block (loop1:6): bit already cleared
[  448.945318][T15105] Trying to free block not in datazone
[  448.948912][T15105] Trying to free block not in datazone
[  448.972940][T15102] Injecting memory failure for pfn 0x1bda95 at process virtual address 0x20495000
00:07:28 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x204)

00:07:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:28 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:29 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x604)

[  449.024933][T15102] Memory failure: 0x1bda95: recovery action for dirty LRU page: Recovered
[  449.033737][T15102] Injecting memory failure for pfn 0x1bdc95 at process virtual address 0x20695000
[  449.084926][T15123] loop3: detected capacity change from 0 to 64
[  449.090710][T15115] Injecting memory failure for pfn 0x1bda60 at process virtual address 0x20460000
[  449.108835][T15102] Memory failure: 0x1bdc95: recovery action for dirty LRU page: Recovered
[  449.111211][T15123] Trying to free block not in datazone
[  449.112517][T15123] Trying to free block not in datazone
[  449.114168][T15123] Trying to free block not in datazone
[  449.115614][T15115] Memory failure: 0x1bda60: recovery action for dirty LRU page: Recovered
[  449.151148][T15123] Trying to free block not in datazone
[  449.154807][T15123] minix_free_block (loop3:6): bit already cleared
[  449.157540][T15115] Injecting memory failure for pfn 0x1bda61 at process virtual address 0x20461000
[  449.160305][T15123] Trying to free block not in datazone
[  449.161654][T15123] Trying to free block not in datazone
[  449.163219][T15115] Memory failure: 0x1bda61: recovery action for dirty LRU page: Recovered
00:07:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:29 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x300)

00:07:29 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:29 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x700)

00:07:29 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  449.603859][T15129] loop1: detected capacity change from 0 to 64
[  449.611393][T15132] loop3: detected capacity change from 0 to 64
00:07:29 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0xfffffdef}], 0x1, 0x1000012, 0x0, 0x0)

[  449.633911][T15132] Trying to free block not in datazone
[  449.635162][T15132] Trying to free block not in datazone
[  449.636354][T15132] Trying to free block not in datazone
[  449.637560][T15132] Trying to free block not in datazone
[  449.640182][T15129] Trying to free block not in datazone
[  449.641369][T15129] Trying to free block not in datazone
[  449.642503][T15129] Trying to free block not in datazone
[  449.643601][T15129] Trying to free block not in datazone
[  449.644750][T15129] minix_free_block (loop1:6): bit already cleared
[  449.646104][T15129] Trying to free block not in datazone
[  449.647224][T15129] Trying to free block not in datazone
[  449.659577][T15132] minix_free_block (loop3:6): bit already cleared
[  449.661029][T15132] Trying to free block not in datazone
[  449.662158][T15132] Trying to free block not in datazone
00:07:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  449.693061][T15135] Injecting memory failure for pfn 0x1bce95 at process virtual address 0x20495000
00:07:29 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc00)

00:07:29 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x402)

00:07:29 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000280)) (async)
io_destroy(r0) (async)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async)
fcntl$dupfd(0xffffffffffffffff, 0x406, r1) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)

[  449.749862][T15135] Memory failure: 0x1bce95: recovery action for dirty LRU page: Recovered
[  449.751760][T15135] Injecting memory failure for pfn 0x1bde95 at process virtual address 0x20695000
[  449.762514][T15139] Injecting memory failure for pfn 0x1bce60 at process virtual address 0x20460000
00:07:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  449.799282][T15145] loop3: detected capacity change from 0 to 64
[  449.827565][T15147] loop1: detected capacity change from 0 to 64
00:07:29 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  449.839930][T15145] Trying to free block not in datazone
[  449.841264][T15145] Trying to free block not in datazone
[  449.846714][T15145] Trying to free block not in datazone
[  449.848003][T15145] Trying to free block not in datazone
[  449.857198][T15147] Trying to free block not in datazone
[  449.858495][T15147] Trying to free block not in datazone
[  449.862303][T15145] minix_free_block (loop3:6): bit already cleared
[  449.863793][T15145] Trying to free block not in datazone
[  449.865014][T15147] Trying to free block not in datazone
[  449.866273][T15147] Trying to free block not in datazone
[  449.867564][T15147] minix_free_block (loop1:6): bit already cleared
[  449.868974][T15147] Trying to free block not in datazone
[  449.870374][T15145] Trying to free block not in datazone
[  449.876074][T15147] Trying to free block not in datazone
[  449.884593][T15135] Memory failure: 0x1bde95: recovery action for dirty LRU page: Recovered
00:07:29 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe00)

00:07:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  449.891132][T15139] Memory failure: 0x1bce60: recovery action for dirty LRU page: Recovered
00:07:29 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x406)

[  449.904432][T15139] Injecting memory failure for pfn 0x1bce61 at process virtual address 0x20461000
[  449.910708][T15139] Memory failure: 0x1bce61: recovery action for dirty LRU page: Recovered
00:07:29 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  449.979211][T15161] loop1: detected capacity change from 0 to 64
[  449.995344][T15160] loop3: detected capacity change from 0 to 64
[  450.006167][T15160] Trying to free block not in datazone
[  450.007690][T15161] Trying to free block not in datazone
[  450.007707][T15161] Trying to free block not in datazone
[  450.009127][T15160] Trying to free block not in datazone
[  450.019553][T15160] Trying to free block not in datazone
[  450.020842][T15160] Trying to free block not in datazone
[  450.022147][T15160] minix_free_block (loop3:6): bit already cleared
00:07:30 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  450.025824][T15160] Trying to free block not in datazone
[  450.029550][T15160] Trying to free block not in datazone
[  450.039632][T15161] Trying to free block not in datazone
[  450.040942][T15161] Trying to free block not in datazone
[  450.042245][T15161] minix_free_block (loop1:6): bit already cleared
[  450.043798][T15161] Trying to free block not in datazone
[  450.045084][T15161] Trying to free block not in datazone
[  450.104758][T15168] Injecting memory failure for pfn 0x1be095 at process virtual address 0x20495000
[  450.121737][T15168] Memory failure: 0x1be095: recovery action for dirty LRU page: Recovered
[  450.125909][T15168] Injecting memory failure for pfn 0x1be295 at process virtual address 0x20695000
[  450.163565][T15168] Memory failure: 0x1be295: recovery action for dirty LRU page: Recovered
[  450.177038][T15168] Injecting memory failure for pfn 0x1be060 at process virtual address 0x20460000
[  450.192573][T15168] Memory failure: 0x1be060: recovery action for dirty LRU page: Recovered
[  450.194451][T15168] Injecting memory failure for pfn 0x1be061 at process virtual address 0x20461000
[  450.209532][T15168] Memory failure: 0x1be061: recovery action for dirty LRU page: Recovered
00:07:30 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x1000000000000}], 0x1, 0x1000012, 0x0, 0x0)

00:07:30 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x600)

00:07:30 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
gettid()
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:30 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:30 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf00)

[  450.646915][T15179] loop3: detected capacity change from 0 to 64
[  450.654462][T15180] loop1: detected capacity change from 0 to 64
[  450.665468][T15177] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000
[  450.672454][T15179] Trying to free block not in datazone
[  450.673802][T15177] page:0000000092c7635f refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fe00
[  450.677275][T15179] Trying to free block not in datazone
[  450.680982][T15177] head:0000000092c7635f order:9 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  450.683163][T15179] Trying to free block not in datazone
[  450.684009][T15180] Trying to free block not in datazone
[  450.685515][T15179] Trying to free block not in datazone
[  450.685528][T15179] minix_free_block (loop3:6): bit already cleared
[  450.685546][T15179] Trying to free block not in datazone
[  450.685558][T15179] Trying to free block not in datazone
[  450.686831][T15177] flags: 0x5ffc00000010801(locked|arch_1|head|node=0|zone=2|lastcpupid=0x7ff)
[  450.701204][T15180] Trying to free block not in datazone
[  450.704153][T15180] Trying to free block not in datazone
[  450.705437][T15180] Trying to free block not in datazone
[  450.707880][T15180] minix_free_block (loop1:6): bit already cleared
00:07:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  450.712961][T15180] Trying to free block not in datazone
[  450.713203][T15177] raw: 05ffc00000010801 0000000000000000 dead000000000122 0000000000000000
00:07:30 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x1100)

[  450.716463][T15180] Trying to free block not in datazone
[  450.725451][T15177] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000
00:07:30 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x604)

[  450.752056][T15177] page dumped because: VM_WARN_ON_ONCE_FOLIO(is_hzp)
00:07:30 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0xeb4, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
io_destroy(r1)
pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000040)="a5e616485a75457aa157a7391bde9150fa62363361f32ccce43a77af467aa966b7f61842c51f54f99cc8fd33fcf77909868e6f59d96ada5dff8079351556ffbb5eec6ff1226340cad29a2ea7823510a6e88f0350de4f55debb19473c8de178b0f20aa6a448b34f0f2f27830f1662", 0x6e, 0x6, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000140)="6ae4e7f420e65b9b05c574c4e2ceb4e5e926271323cbc9edd77337fa5ebc24fa271cde0e5c34d574aa1855b5d8fafcf8ca481c74232ddc8d742a7ebb2ef96de31dca9716ced7e1ef5a614475eecfe037a0182fd7e6a64e32a384aab7c492855c268dc0117ccde3c5f222d9269b519d8549d33a7f986437c3f091a1cfd92cefc4310c8b03276b96e04b38c67983ccb779dfbff42f62dc56418fb079ffcdd4cd62edb9383a0242c6c4f8e56dc9873b933f44e10029ece3e6037623936e760d599f4a5407f8dc0af589ed4eb09271e4dc889b633eb468ea86ee20c6ad37fbe343582792fbd68cc97f36ff6b788d10370ff9755e05a6e355", 0xf6, 0xff}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="09e47c688f34b87142507e5ee2550925098c78c8ba1a672f32fc4e85be1922dd8fd5fd4b05072ec289288e37b35ac1028ea0145f1a8a917d2fb236dff5f61f0936e20007e703d143592060b1d289245019dfcf656902dc65d99f8466e5c23b6872212043b7ad258b519cedb6020551211f222bd56dbbb54441f1c0a539f8675c24cf7f4611832be18c7a5cb46f2a1251c6a7188a86837c85d9e561e287992906a48f1ab1ad3d2473bb65b413c650f2abd577054f92c62cf0a04cec8cbd88d8120c3599664acdab7874aecaed795dedf516921f6420865fb0a52e803e8551a97be252505bd012d9a5adb421a70b44ec1ca65520", 0xf3, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000400)="84a848177222ec65b48cdc038b34640706a2156233aa6b994ae200bc02160278e37ac17a1e34b1035bfceb8524916688d887cfc5036ab07499971ed415dc7aa43ca875cccad18628424787c4f555ee3df0520760c7bf015f01bb627542f610dd1c3a76f890a722831be5092b26322eaf934da9909bb423285ebb58bc07cf494c7e30c4bcff530b182c928b8c56d161846a2bc3414a1601e2007221f304670dcc96b2f4d7498fc2f90438ef935eb52a6ec509a61e6cf31bb5d2597890e5f46ff2576e60dfcd9962f2536dbe1ddc3a4436a6439863ed5b2d1293e7b97988936f3fda", 0xe1, 0x4, 0x0, 0x2}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

[  450.769224][T15177] ------------[ cut here ]------------
[  450.770425][T15177] WARNING: CPU: 0 PID: 15177 at mm/huge_memory.c:2660 split_huge_page_to_list+0x2990/0x31e0
[  450.772642][T15177] Modules linked in:
[  450.773546][T15177] CPU: 0 PID: 15177 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0
[  450.775715][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[  450.777864][T15177] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  450.779545][T15177] pc : split_huge_page_to_list+0x2990/0x31e0
[  450.780830][T15177] lr : split_huge_page_to_list+0x2984/0x31e0
[  450.782167][T15177] sp : ffff8000232973c0
[  450.783018][T15177] x29: ffff800023297590 x28: fffffc00037f8018 x27: ffff8000232974f8
[  450.784802][T15177] x26: ffff700004652e98 x25: 1fffff80006ff000 x24: dfff800000000000
[  450.786534][T15177] x23: 00000000fffffff0 x22: fffffc00037f8008 x21: fffffc00037f8000
[  450.788171][T15177] x20: 05ffc00000010801 x19: ffff800018986000 x18: 1fffe0003684a5b6
[  450.789908][T15177] x17: ffff800015d6d000 x16: ffff80001236e294 x15: 0000000000000002
[  450.791630][T15177] x14: 1ffff00002bae0b0 x13: dfff800000000000 x12: 0000000000000001
[  450.793355][T15177] x11: 0000000000040000 x10: 000000000003ffff x9 : ffff800029d87000
[  450.795101][T15177] x8 : 0000000000000001 x7 : ffff80000827ece4 x6 : 0000000000000000
[  450.796806][T15177] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80000aa6162c
[  450.798547][T15177] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000032
[  450.800235][T15177] Call trace:
[  450.800945][T15177]  split_huge_page_to_list+0x2990/0x31e0
[  450.802194][T15177]  try_to_split_thp_page+0x110/0x19c
[  450.803309][T15177]  memory_failure+0x4d4/0x1f44
[  450.804331][T15177]  do_madvise+0x500/0x2f2c
[  450.805282][T15177]  __arm64_sys_madvise+0xa4/0xc0
[  450.806388][T15177]  invoke_syscall+0x98/0x2c0
[  450.807344][T15177]  el0_svc_common+0x138/0x258
[  450.808409][T15177]  do_el0_svc+0x64/0x198
[  450.809289][T15177]  el0_svc+0x4c/0x15c
[  450.810169][T15177]  el0t_64_sync_handler+0x84/0xf0
[  450.811281][T15177]  el0t_64_sync+0x190/0x194
[  450.812276][T15177] irq event stamp: 1430
[  450.813175][T15177] hardirqs last  enabled at (1429): [<ffff80000827ed84>] finish_lock_switch+0xbc/0x1e4
[  450.815230][T15177] hardirqs last disabled at (1430): [<ffff800012369e90>] el1_dbg+0x24/0x80
[  450.817236][T15177] softirqs last  enabled at (1366): [<ffff800008020c1c>] __do_softirq+0xac0/0xd54
[  450.819286][T15177] softirqs last disabled at (1217): [<ffff80000802a658>] ____do_softirq+0x14/0x20
[  450.821279][T15177] ---[ end trace 0000000000000000 ]---
[  450.840229][T15188] loop3: detected capacity change from 0 to 64
[  450.872133][T15188] Trying to free block not in datazone
[  450.873463][T15188] Trying to free block not in datazone
[  450.877050][T15188] Trying to free block not in datazone
00:07:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  450.889246][T15188] Trying to free block not in datazone
[  450.894033][T15188] minix_free_block (loop3:6): bit already cleared
[  450.897638][T15188] Trying to free block not in datazone
[  450.911707][T15188] Trying to free block not in datazone
00:07:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  450.946831][T15189] loop1: detected capacity change from 0 to 64
[  450.955712][T15189] Trying to free block not in datazone
[  450.966757][T15189] Trying to free block not in datazone
[  450.968059][T15189] Trying to free block not in datazone
[  450.969845][T15189] Trying to free block not in datazone
[  450.971104][T15189] minix_free_block (loop1:6): bit already cleared
[  450.972559][T15189] Trying to free block not in datazone
[  450.973798][T15189] Trying to free block not in datazone
[  451.020153][T15182] Injecting memory failure for pfn 0x11fe60 at process virtual address 0x20460000
[  451.022487][T15177] Memory failure: 0x11fe95: recovery action for unsplit thp: Ignored
[  451.025036][T15182] Memory failure: 0x11fe60: recovery action for unsplit thp: Ignored
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0xfffffffffffffdef}], 0x1, 0x1000012, 0x0, 0x0)

00:07:31 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0xeb4, &(0x7f0000000000)) (async)
io_setup(0xeb4, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
io_destroy(r1)
pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000040)="a5e616485a75457aa157a7391bde9150fa62363361f32ccce43a77af467aa966b7f61842c51f54f99cc8fd33fcf77909868e6f59d96ada5dff8079351556ffbb5eec6ff1226340cad29a2ea7823510a6e88f0350de4f55debb19473c8de178b0f20aa6a448b34f0f2f27830f1662", 0x6e, 0x6, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000140)="6ae4e7f420e65b9b05c574c4e2ceb4e5e926271323cbc9edd77337fa5ebc24fa271cde0e5c34d574aa1855b5d8fafcf8ca481c74232ddc8d742a7ebb2ef96de31dca9716ced7e1ef5a614475eecfe037a0182fd7e6a64e32a384aab7c492855c268dc0117ccde3c5f222d9269b519d8549d33a7f986437c3f091a1cfd92cefc4310c8b03276b96e04b38c67983ccb779dfbff42f62dc56418fb079ffcdd4cd62edb9383a0242c6c4f8e56dc9873b933f44e10029ece3e6037623936e760d599f4a5407f8dc0af589ed4eb09271e4dc889b633eb468ea86ee20c6ad37fbe343582792fbd68cc97f36ff6b788d10370ff9755e05a6e355", 0xf6, 0xff}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="09e47c688f34b87142507e5ee2550925098c78c8ba1a672f32fc4e85be1922dd8fd5fd4b05072ec289288e37b35ac1028ea0145f1a8a917d2fb236dff5f61f0936e20007e703d143592060b1d289245019dfcf656902dc65d99f8466e5c23b6872212043b7ad258b519cedb6020551211f222bd56dbbb54441f1c0a539f8675c24cf7f4611832be18c7a5cb46f2a1251c6a7188a86837c85d9e561e287992906a48f1ab1ad3d2473bb65b413c650f2abd577054f92c62cf0a04cec8cbd88d8120c3599664acdab7874aecaed795dedf516921f6420865fb0a52e803e8551a97be252505bd012d9a5adb421a70b44ec1ca65520", 0xf3, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000400)="84a848177222ec65b48cdc038b34640706a2156233aa6b994ae200bc02160278e37ac17a1e34b1035bfceb8524916688d887cfc5036ab07499971ed415dc7aa43ca875cccad18628424787c4f555ee3df0520760c7bf015f01bb627542f610dd1c3a76f890a722831be5092b26322eaf934da9909bb423285ebb58bc07cf494c7e30c4bcff530b182c928b8c56d161846a2bc3414a1601e2007221f304670dcc96b2f4d7498fc2f90438ef935eb52a6ec509a61e6cf31bb5d2597890e5f46ff2576e60dfcd9962f2536dbe1ddc3a4436a6439863ed5b2d1293e7b97988936f3fda", 0xe1, 0x4, 0x0, 0x2}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:31 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x1200)

00:07:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
gettid()
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xc00)

[  451.090939][T15204] loop3: detected capacity change from 0 to 64
[  451.107043][T15205] loop1: detected capacity change from 0 to 64
[  451.123400][T15208] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000
[  451.124451][T15204] Trying to free block not in datazone
[  451.126733][T15204] Trying to free block not in datazone
[  451.127943][T15204] Trying to free block not in datazone
[  451.129061][T15204] Trying to free block not in datazone
[  451.129421][T15205] Trying to free block not in datazone
[  451.133904][T15208] Memory failure: 0x11fe95: already hardware poisoned
[  451.135849][T15205] Trying to free block not in datazone
[  451.143637][T15205] Trying to free block not in datazone
[  451.144602][T15204] minix_free_block (loop3:6): bit already cleared
[  451.152151][T15205] Trying to free block not in datazone
[  451.152835][T15204] Trying to free block not in datazone
[  451.155755][T15205] minix_free_block (loop1:6): bit already cleared
[  451.160107][T15204] Trying to free block not in datazone
00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.172591][T15208] Injecting memory failure for pfn 0x11fe60 at process virtual address 0x20460000
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x2, 0x1000012, 0x0, 0x0)

[  451.179597][T15205] Trying to free block not in datazone
[  451.184677][T15208] Memory failure: 0x11fe60: already hardware poisoned
[  451.186312][T15205] Trying to free block not in datazone
00:07:31 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x2000)

00:07:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
gettid()
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xe00)

00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x3, 0x1000012, 0x0, 0x0)

[  451.261378][T15223] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000
[  451.263492][T15223] Memory failure: 0x11fe95: already hardware poisoned
[  451.277438][T15225] loop3: detected capacity change from 0 to 64
00:07:31 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_setup(0xeb4, &(0x7f0000000000)=<r1=>0x0) (async)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
io_destroy(r1)
pwritev(r2, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000040)="a5e616485a75457aa157a7391bde9150fa62363361f32ccce43a77af467aa966b7f61842c51f54f99cc8fd33fcf77909868e6f59d96ada5dff8079351556ffbb5eec6ff1226340cad29a2ea7823510a6e88f0350de4f55debb19473c8de178b0f20aa6a448b34f0f2f27830f1662", 0x6e, 0x6, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000140)="6ae4e7f420e65b9b05c574c4e2ceb4e5e926271323cbc9edd77337fa5ebc24fa271cde0e5c34d574aa1855b5d8fafcf8ca481c74232ddc8d742a7ebb2ef96de31dca9716ced7e1ef5a614475eecfe037a0182fd7e6a64e32a384aab7c492855c268dc0117ccde3c5f222d9269b519d8549d33a7f986437c3f091a1cfd92cefc4310c8b03276b96e04b38c67983ccb779dfbff42f62dc56418fb079ffcdd4cd62edb9383a0242c6c4f8e56dc9873b933f44e10029ece3e6037623936e760d599f4a5407f8dc0af589ed4eb09271e4dc889b633eb468ea86ee20c6ad37fbe343582792fbd68cc97f36ff6b788d10370ff9755e05a6e355", 0xf6, 0xff}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="09e47c688f34b87142507e5ee2550925098c78c8ba1a672f32fc4e85be1922dd8fd5fd4b05072ec289288e37b35ac1028ea0145f1a8a917d2fb236dff5f61f0936e20007e703d143592060b1d289245019dfcf656902dc65d99f8466e5c23b6872212043b7ad258b519cedb6020551211f222bd56dbbb54441f1c0a539f8675c24cf7f4611832be18c7a5cb46f2a1251c6a7188a86837c85d9e561e287992906a48f1ab1ad3d2473bb65b413c650f2abd577054f92c62cf0a04cec8cbd88d8120c3599664acdab7874aecaed795dedf516921f6420865fb0a52e803e8551a97be252505bd012d9a5adb421a70b44ec1ca65520", 0xf3, 0x1, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000400)="84a848177222ec65b48cdc038b34640706a2156233aa6b994ae200bc02160278e37ac17a1e34b1035bfceb8524916688d887cfc5036ab07499971ed415dc7aa43ca875cccad18628424787c4f555ee3df0520760c7bf015f01bb627542f610dd1c3a76f890a722831be5092b26322eaf934da9909bb423285ebb58bc07cf494c7e30c4bcff530b182c928b8c56d161846a2bc3414a1601e2007221f304670dcc96b2f4d7498fc2f90438ef935eb52a6ec509a61e6cf31bb5d2597890e5f46ff2576e60dfcd9962f2536dbe1ddc3a4436a6439863ed5b2d1293e7b97988936f3fda", 0xe1, 0x4, 0x0, 0x2}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.296597][T15228] loop1: detected capacity change from 0 to 64
[  451.308833][T15223] Injecting memory failure for pfn 0x11fe60 at process virtual address 0x20460000
[  451.320588][T15223] Memory failure: 0x11fe60: already hardware poisoned
[  451.322237][T15228] Trying to free block not in datazone
[  451.326972][T15228] Trying to free block not in datazone
[  451.331936][T15228] Trying to free block not in datazone
[  451.332426][T15225] Trying to free block not in datazone
[  451.335598][T15228] Trying to free block not in datazone
[  451.343412][T15225] Trying to free block not in datazone
[  451.343977][T15228] minix_free_block (loop1:6): bit already cleared
[  451.345887][T15225] Trying to free block not in datazone
[  451.349540][T15228] Trying to free block not in datazone
[  451.352203][T15225] Trying to free block not in datazone
[  451.355874][T15225] minix_free_block (loop3:6): bit already cleared
[  451.359944][T15225] Trying to free block not in datazone
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x4, 0x1000012, 0x0, 0x0)

[  451.360264][T15228] Trying to free block not in datazone
00:07:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  451.366715][T15225] Trying to free block not in datazone
00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xf00)

00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:31 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4000)

00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x5, 0x1000012, 0x0, 0x0)

00:07:31 executing program 5:
io_setup(0x40008, &(0x7f0000000280)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r4 = syz_open_dev$rtc(&(0x7f0000000140), 0xc00000000, 0x2)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000000)="33e8d2e9c5b0b23466c4e9e8235713fd903545c3d87610a657aaf29b795ff1730d81f15d0ed0dffd1e941cda3f16a7a23bcb0b223fe31a29c683cc676f5844678d9466157dc4be20f60715fd260ed36e47b42be0f4146d0df209332aa75a2a19a0b40ea31d5ab5e0a81344e0596472a64b4b7e90d0a9a20a719da640999846e25f3e88815f892e65973b8d0ea71b7ebc76799f2556b2b8a0e55a3ebfbe386178bc7347377499cd75922b3b3fea1ac328c29db9", 0xb3, 0x8, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000180)="b2ef9c695f5d6c35b25fddc4cc62320993f2eb7e59724cfd414f5d48948df0b1201957d1285d644cc1ca13500df85df80e74f0f637418ed3331ed6d3794cbab4db7ef46e9b780591e8c00d5ffca8fc4e6073b7886ad0dc2903eb49d6c3376435433be63fc357f2ed7454bdd253a40516434e8aa9978111f3b4d721b0bce81101683eed5e0a3f9b1f7d6b00eec6957e56093bd911ae9bb9c393df36fe6f14519da5eb982f738f2a726a46b659dae7df23cd0eb3b4aab12d24694955370da16979a5ef6a8e2ec5bdecf42809", 0xcb, 0x7, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4675, r5, &(0x7f0000000300)="a0cd3b89b8c87747a1a6cf016bed575b8c3f9fe3a66d62459d9e356ecff0c565790734ced65482c919eac123e7f43774d0e068d66e61865166e23e658bbafc7dfff1350a9e3613e3fc140f3a925d63684bf39ecab308417c2fd7154a8bfec0d504c59100b836a61ddec63a1044f87a2814cddbd5149c89ea", 0x78, 0x0, 0x0, 0x2, r7}])

[  451.454764][T15240] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000
[  451.466294][T15240] Memory failure: 0x11fe95: already hardware poisoned
[  451.473263][T15246] loop1: detected capacity change from 0 to 64
[  451.476419][T15247] loop3: detected capacity change from 0 to 64
[  451.492865][T15240] Injecting memory failure for pfn 0x11fe60 at process virtual address 0x20460000
[  451.496580][T15240] Memory failure: 0x11fe60: already hardware poisoned
[  451.502991][T15246] Trying to free block not in datazone
[  451.504184][T15246] Trying to free block not in datazone
[  451.505400][T15246] Trying to free block not in datazone
[  451.506602][T15246] Trying to free block not in datazone
[  451.507743][T15246] minix_free_block (loop1:6): bit already cleared
[  451.509217][T15246] Trying to free block not in datazone
00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.522528][T15247] Trying to free block not in datazone
00:07:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  451.530643][T15247] Trying to free block not in datazone
[  451.537412][T15247] Trying to free block not in datazone
[  451.549060][T15247] Trying to free block not in datazone
[  451.558410][T15246] Trying to free block not in datazone
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x6, 0x1000012, 0x0, 0x0)

[  451.563400][T15247] minix_free_block (loop3:6): bit already cleared
[  451.574019][T15247] Trying to free block not in datazone
[  451.581924][T15247] Trying to free block not in datazone
00:07:31 executing program 5:
io_setup(0x40008, &(0x7f0000000280)) (async)
io_setup(0x40008, &(0x7f0000000280)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000240)) (async)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000140), 0xc00000000, 0x2) (async)
r4 = syz_open_dev$rtc(&(0x7f0000000140), 0xc00000000, 0x2)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000000)="33e8d2e9c5b0b23466c4e9e8235713fd903545c3d87610a657aaf29b795ff1730d81f15d0ed0dffd1e941cda3f16a7a23bcb0b223fe31a29c683cc676f5844678d9466157dc4be20f60715fd260ed36e47b42be0f4146d0df209332aa75a2a19a0b40ea31d5ab5e0a81344e0596472a64b4b7e90d0a9a20a719da640999846e25f3e88815f892e65973b8d0ea71b7ebc76799f2556b2b8a0e55a3ebfbe386178bc7347377499cd75922b3b3fea1ac328c29db9", 0xb3, 0x8, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000180)="b2ef9c695f5d6c35b25fddc4cc62320993f2eb7e59724cfd414f5d48948df0b1201957d1285d644cc1ca13500df85df80e74f0f637418ed3331ed6d3794cbab4db7ef46e9b780591e8c00d5ffca8fc4e6073b7886ad0dc2903eb49d6c3376435433be63fc357f2ed7454bdd253a40516434e8aa9978111f3b4d721b0bce81101683eed5e0a3f9b1f7d6b00eec6957e56093bd911ae9bb9c393df36fe6f14519da5eb982f738f2a726a46b659dae7df23cd0eb3b4aab12d24694955370da16979a5ef6a8e2ec5bdecf42809", 0xcb, 0x7, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4675, r5, &(0x7f0000000300)="a0cd3b89b8c87747a1a6cf016bed575b8c3f9fe3a66d62459d9e356ecff0c565790734ced65482c919eac123e7f43774d0e068d66e61865166e23e658bbafc7dfff1350a9e3613e3fc140f3a925d63684bf39ecab308417c2fd7154a8bfec0d504c59100b836a61ddec63a1044f87a2814cddbd5149c89ea", 0x78, 0x0, 0x0, 0x2, r7}]) (async)
io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000000)="33e8d2e9c5b0b23466c4e9e8235713fd903545c3d87610a657aaf29b795ff1730d81f15d0ed0dffd1e941cda3f16a7a23bcb0b223fe31a29c683cc676f5844678d9466157dc4be20f60715fd260ed36e47b42be0f4146d0df209332aa75a2a19a0b40ea31d5ab5e0a81344e0596472a64b4b7e90d0a9a20a719da640999846e25f3e88815f892e65973b8d0ea71b7ebc76799f2556b2b8a0e55a3ebfbe386178bc7347377499cd75922b3b3fea1ac328c29db9", 0xb3, 0x8, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000180)="b2ef9c695f5d6c35b25fddc4cc62320993f2eb7e59724cfd414f5d48948df0b1201957d1285d644cc1ca13500df85df80e74f0f637418ed3331ed6d3794cbab4db7ef46e9b780591e8c00d5ffca8fc4e6073b7886ad0dc2903eb49d6c3376435433be63fc357f2ed7454bdd253a40516434e8aa9978111f3b4d721b0bce81101683eed5e0a3f9b1f7d6b00eec6957e56093bd911ae9bb9c393df36fe6f14519da5eb982f738f2a726a46b659dae7df23cd0eb3b4aab12d24694955370da16979a5ef6a8e2ec5bdecf42809", 0xcb, 0x7, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4675, r5, &(0x7f0000000300)="a0cd3b89b8c87747a1a6cf016bed575b8c3f9fe3a66d62459d9e356ecff0c565790734ced65482c919eac123e7f43774d0e068d66e61865166e23e658bbafc7dfff1350a9e3613e3fc140f3a925d63684bf39ecab308417c2fd7154a8bfec0d504c59100b836a61ddec63a1044f87a2814cddbd5149c89ea", 0x78, 0x0, 0x0, 0x2, r7}])

00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x1100)

00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x0, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.609271][T15257] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000
[  451.611814][T15257] Memory failure: 0x11fe95: already hardware poisoned
[  451.618550][T15257] Injecting memory failure for pfn 0x11fe60 at process virtual address 0x20460000
00:07:31 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4100)

[  451.620763][T15257] Memory failure: 0x11fe60: already hardware poisoned
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x8, 0x1000012, 0x0, 0x0)

00:07:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  451.717522][T15270] loop3: detected capacity change from 0 to 64
[  451.722067][T15271] loop1: detected capacity change from 0 to 64
00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x0, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.728392][T15271] Trying to free block not in datazone
[  451.735180][T15271] Trying to free block not in datazone
[  451.736399][T15271] Trying to free block not in datazone
[  451.737602][T15271] Trying to free block not in datazone
[  451.738812][T15271] minix_free_block (loop1:6): bit already cleared
[  451.738896][T15270] Trying to free block not in datazone
00:07:31 executing program 5:
io_setup(0x40008, &(0x7f0000000280)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async)
r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r3, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
r4 = syz_open_dev$rtc(&(0x7f0000000140), 0xc00000000, 0x2) (async)
r5 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r5, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0) (async)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000000)="33e8d2e9c5b0b23466c4e9e8235713fd903545c3d87610a657aaf29b795ff1730d81f15d0ed0dffd1e941cda3f16a7a23bcb0b223fe31a29c683cc676f5844678d9466157dc4be20f60715fd260ed36e47b42be0f4146d0df209332aa75a2a19a0b40ea31d5ab5e0a81344e0596472a64b4b7e90d0a9a20a719da640999846e25f3e88815f892e65973b8d0ea71b7ebc76799f2556b2b8a0e55a3ebfbe386178bc7347377499cd75922b3b3fea1ac328c29db9", 0xb3, 0x8, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000180)="b2ef9c695f5d6c35b25fddc4cc62320993f2eb7e59724cfd414f5d48948df0b1201957d1285d644cc1ca13500df85df80e74f0f637418ed3331ed6d3794cbab4db7ef46e9b780591e8c00d5ffca8fc4e6073b7886ad0dc2903eb49d6c3376435433be63fc357f2ed7454bdd253a40516434e8aa9978111f3b4d721b0bce81101683eed5e0a3f9b1f7d6b00eec6957e56093bd911ae9bb9c393df36fe6f14519da5eb982f738f2a726a46b659dae7df23cd0eb3b4aab12d24694955370da16979a5ef6a8e2ec5bdecf42809", 0xcb, 0x7, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4675, r5, &(0x7f0000000300)="a0cd3b89b8c87747a1a6cf016bed575b8c3f9fe3a66d62459d9e356ecff0c565790734ced65482c919eac123e7f43774d0e068d66e61865166e23e658bbafc7dfff1350a9e3613e3fc140f3a925d63684bf39ecab308417c2fd7154a8bfec0d504c59100b836a61ddec63a1044f87a2814cddbd5149c89ea", 0x78, 0x0, 0x0, 0x2, r7}])

[  451.747786][T15271] Trying to free block not in datazone
[  451.749021][T15271] Trying to free block not in datazone
[  451.768561][T15270] Trying to free block not in datazone
[  451.770029][T15270] Trying to free block not in datazone
00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x1200)

[  451.778443][T15270] Trying to free block not in datazone
[  451.781182][T15270] minix_free_block (loop3:6): bit already cleared
[  451.782733][T15270] Trying to free block not in datazone
[  451.783969][T15270] Trying to free block not in datazone
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0xe, 0x1000012, 0x0, 0x0)

[  451.791245][T15273] Injecting memory failure for pfn 0x11fe95 at process virtual address 0x20495000
[  451.809472][T15273] Memory failure: 0x11fe95: already hardware poisoned
00:07:31 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x6f01)

[  451.838104][T15273] Injecting memory failure for pfn 0x11fe60 at process virtual address 0x20460000
00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x0, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.847534][T15273] Memory failure: 0x11fe60: already hardware poisoned
[  451.849779][T15281] loop1: detected capacity change from 0 to 64
[  451.862600][T15281] Trying to free block not in datazone
[  451.863967][T15281] Trying to free block not in datazone
[  451.873133][T15281] Trying to free block not in datazone
[  451.874418][T15281] Trying to free block not in datazone
[  451.875703][T15281] minix_free_block (loop1:6): bit already cleared
00:07:31 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
io_submit(r0, 0x3, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000000)="74e2f1bd42b34afba0eb0a7742b0cb9b696cb1cfc605c862834987b1733ad44ffb046a59b61c3e53a88b05c90e42036b9e644102e1bf07216f4e7180978ec0d85ce125d61d", 0x45, 0x1, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="83c914432010d49b1fd90559e9f219602f262d5079ec2ab5aacdc2ebda4d1db56d5fb4910c83cc5b0c3f0fc1f2fab8e208057d9cd33234ec4d3b324fb6fe0d5da8f89caf179cbffd5e35a6f8478df9d482321fe0e39546bfe0472b5acb345edcdd001d9deaef73a456da4f3321aa1b9d2aad29f1dee513539d89e197f2cc3c03da27802840", 0x85, 0x4, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1ff, r3, &(0x7f00000002c0)="8377af466a1f32bbc739da79adb0f525480f2cf24bd7a6883e5e85a3fef92ec5218de0fba5820a28856e6658688f75065da5f0a9bb5cda8b0707cf5afc1d8d0807c18c5c0405df57c00f7c4dc87b924834b55e3fdce0cdc21595c82c2c3a2d3205052d11d34756c1bc814c3a628bb2c635f42a1265cbc30d6759b80bb50428a49ed04a3054de4c7b0541c002e7bd86ab441ae01a47f49087", 0x98, 0xff, 0x0, 0x2}])

[  451.891342][T15281] Trying to free block not in datazone
[  451.892585][T15281] Trying to free block not in datazone
00:07:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f0000916000/0x8000)=nil, 0x8000, 0x4000, 0x3, &(0x7f00007c4000/0x4000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64)
syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
madvise(&(0x7f0000460000/0x2000)=nil, 0x2000, 0x64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x300000e, 0x8010, 0xffffffffffffffff, 0x0)

[  451.901038][T15286] loop3: detected capacity change from 0 to 64
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0xf, 0x1000012, 0x0, 0x0)

00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x2000)

[  451.945483][T15286] Trying to free block not in datazone
[  451.946910][T15286] Trying to free block not in datazone
[  451.954636][T15286] Trying to free block not in datazone
00:07:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x0, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[  451.959175][T15286] Trying to free block not in datazone
[  451.964115][T15286] minix_free_block (loop3:6): bit already cleared
[  451.971431][T15286] Trying to free block not in datazone
[  451.979526][T15286] Trying to free block not in datazone
00:07:31 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x10, 0x1000012, 0x0, 0x0)

00:07:31 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}) (async)
r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
io_submit(r0, 0x3, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000000)="74e2f1bd42b34afba0eb0a7742b0cb9b696cb1cfc605c862834987b1733ad44ffb046a59b61c3e53a88b05c90e42036b9e644102e1bf07216f4e7180978ec0d85ce125d61d", 0x45, 0x1, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="83c914432010d49b1fd90559e9f219602f262d5079ec2ab5aacdc2ebda4d1db56d5fb4910c83cc5b0c3f0fc1f2fab8e208057d9cd33234ec4d3b324fb6fe0d5da8f89caf179cbffd5e35a6f8478df9d482321fe0e39546bfe0472b5acb345edcdd001d9deaef73a456da4f3321aa1b9d2aad29f1dee513539d89e197f2cc3c03da27802840", 0x85, 0x4, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1ff, r3, &(0x7f00000002c0)="8377af466a1f32bbc739da79adb0f525480f2cf24bd7a6883e5e85a3fef92ec5218de0fba5820a28856e6658688f75065da5f0a9bb5cda8b0707cf5afc1d8d0807c18c5c0405df57c00f7c4dc87b924834b55e3fdce0cdc21595c82c2c3a2d3205052d11d34756c1bc814c3a628bb2c635f42a1265cbc30d6759b80bb50428a49ed04a3054de4c7b0541c002e7bd86ab441ae01a47f49087", 0x98, 0xff, 0x0, 0x2}])

00:07:31 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4000)

00:07:32 executing program 3:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$eJzs20tu01AUxvHvxsGJeRYKDBBSkRjAhDpNRSVGlHUwqlq3qnABUSatGJgVsAbWwYSlsAA6YMaIIj/ywHES7MRxHv/fxMc+Ob6Obm58FMUCsLJ29UhGRna487C59mXd/FedXfaFASjdZbL9c1mEU6gKwLywfqePJB1AUM31AJiVi1fSD0k/f33al2XrZao/CPNBJ19rDPQPF5+lB/Ukb5py0v3FV+lJp95cHayvx9s4fy3z/E8fd8a/rhu6qVta023d0bpMlD/o1t8v2AUBALBajDbH5dMv+N6/U9Phse+1htZf0eG3wbt6jx3Vt8fkt4fmG1F+c/+dfzBiFABZavnX/z+sMeu/HuW3kr1msYsEUIrTs/M3e77vfZgkcLJTVjLGNIaoKmhI6h7ZLWesjcnPY+JfaZROOWFggnge8p35dd+RcCYrmwITzMUnIVewkTEXhQJ7mus0V1DRFxKAmXE/nrx3T8/Onx2f7B15R97bdqv1Yuf59tZO2406e3d0fw9gcfVu+ur7NxAAAAAAAAAAAAAAAFgkd3Uv3KQf2wUAAACwhGbxOFHV7xEAAAAAAAAAAAAAAAAAgGXzNwAA//9q6wbd")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0xff0f)

[  452.046053][T15306] loop1: detected capacity change from 0 to 64
00:07:32 executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x41, 0x1000012, 0x0, 0x0)

[  452.081550][T15306] Trying to free block not in datazone
[  452.082846][T15306] Trying to free block not in datazone
[  452.084178][T15306] Trying to free block not in datazone
[  452.085395][T15306] Trying to free block not in datazone
00:07:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0x6f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x100, 0x70bd26, 0x0, {{}, {}, {0x8, 0x11, 0x8014}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1c72f983320e7772)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xc, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x40}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r7 = dup(r6)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40844)
r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
pwritev(r8, &(0x7f0000001700)=[{&(0x7f0000000000)='X', 0x1}, {&(0x7f0000000100)='\'', 0x1}], 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000540))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)=ANY=[@ANYBLOB="a5440000ff", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000020000001800028008000200050000000400010008000400f61fdfc8"], 0x44}}, 0x0)
r10 = accept4$phonet_pipe(r4, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x800)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000240)=0x4)
r11 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4104}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x5}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x49d0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

00:07:32 executing program 5:
io_setup(0x9, &(0x7f0000000280)=<r0=>0x0)
io_destroy(r0) (async)
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = dup(r1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
io_submit(r0, 0x3, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000000)="74e2f1bd42b34afba0eb0a7742b0cb9b696cb1cfc605c862834987b1733ad44ffb046a59b61c3e53a88b05c90e42036b9e644102e1bf07216f4e7180978ec0d85ce125d61d", 0x45, 0x1, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="83c914432010d49b1fd90559e9f219602f262d5079ec2ab5aacdc2ebda4d1db56d5fb4910c83cc5b0c3f0fc1f2fab8e208057d9cd33234ec4d3b324fb6fe0d5da8f89caf179cbffd5e35a6f8478df9d482321fe0e39546bfe0472b5acb345edcdd001d9deaef73a456da4f3321aa1b9d2aad29f1dee513539d89e197f2cc3c03da27802840", 0x85, 0x4, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1ff, r3, &(0x7f00000002c0)="8377af466a1f32bbc739da79adb0f525480f2cf24bd7a6883e5e85a3fef92ec5218de0fba5820a28856e6658688f75065da5f0a9bb5cda8b0707cf5afc1d8d0807c18c5c0405df57c00f7c4dc87b924834b55e3fdce0cdc21595c82c2c3a2d3205052d11d34756c1bc814c3a628bb2c635f42a1265cbc30d6759b80bb50428a49ed04a3054de4c7b0541c002e7bd86ab441ae01a47f49087", 0x98, 0xff, 0x0, 0x2}])

[  452.102680][T15306] minix_free_block (loop1:6): bit already cleared
[  452.104119][T15306] Trying to free block not in datazone
[  452.118903][T15312] loop3: detected capacity change from 0 to 64
[  452.122400][T15306] Trying to free block not in datazone
[  452.132682][T15293] Injecting memory failure for pfn 0x179f0a at process virtual address 0x20495000
[  452.137701][T15312] Trying to free block not in datazone
[  452.138938][T15312] Trying to free block not in datazone
[  452.142692][T15312] Trying to free block not in datazone
[  452.143958][T15312] Trying to free block not in datazone
[  452.150291][T15293] Memory failure: 0x179f0a: recovery action for dirty LRU page: Recovered
[  452.151365][T15312] minix_free_block (loop3:6): bit already cleared
00:07:32 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1000000, &(0x7f0000000480)=ANY=[], 0x1, 0x1c5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000100)='./file2\x00', 0xfffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = dup(r0)
pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="da", 0x20000}], 0x1, 0x1002000, 0x0, 0x4100)

[  452.159257][T15312] Trying to free block not in datazone
[  452.164289][T15293] Injecting memory failure for pfn 0x178c56 at process virtual address 0x20496000
[  452.164344][T15312] Trying to free block not in datazone
[  452.167662][T15293] Memory failure: 0x178c56: recovery action for dirty LRU page: Recovered
[  452.182577][T15293] Injecting memory failure for pfn 0x188a7e at process virtual address 0x20497000
[  452.224057][T15293] Memory failure: 0x188a7e: recovery action for dirty LRU page: Recovered
[  452.224416][T15321] loop1: detected capacity change from 0 to 64
[  452.226149][T15293] Injecting memory failure for pfn 0x1773f9 at process virtual address 0x20498000
[  452.235077][T15310] Injecting memory failure for pfn 0x18722c at process virtual address 0x20460000
[  452.244785][T15321] Trying to free block not in datazone
[  452.246060][T15321] Trying to free block not in datazone
[  452.247298][T15321] Trying to free block not in datazone
[  452.248633][T15321] Trying to free block not in datazone
[  452.254304][T15321] minix_free_block (loop1:6): bit already cleared
[  452.255734][T15321] Trying to free block not in datazone
[  452.257020][T15321] Trying to free block not in datazone
[  452.258342][T15310] Memory failure: 0x18722c: recovery action for dirty LRU page: Recovered
[  452.264649][T15310] Injecting memory failure for pfn 0x178fdf at process virtual address 0x20461000
[  452.275629][T15293] Memory failure: 0x1773f9: recovery action for dirty LRU page: Recovered
[  452.277572][T15293] Injecting memory failure for pfn 0x17d3fd at process virtual address 0x20499000
[  452.287859][T15310] Memory failure: 0x178fdf: recovery action for dirty LRU page: Recovered
[  452.290477][T15293] Memory failure: 0x17d3fd: recovery action for dirty LRU page: Recovered
[  452.292566][T15293] Injecting memory failure for pfn 0x179d13 at process virtual address 0x2049a000
[  452.294854][T15293] Memory failure: 0x179d13: recovery action for dirty LRU page: Recovered
[  452.297030][T15293] Injecting memory failure for pfn 0x17abbb at process virtual address 0x2049b000
[  452.307495][T15293] Memory failure: 0x17abbb: recovery action for dirty LRU page: Recovered
[  452.309729][T15293] Injecting memory failure for pfn 0x183c9c at process virtual address 0x2049c000
[  452.319950][T15293] Memory failure: 0x183c9c: recovery action for dirty LRU page: Recovered
[  452.322012][T15293] Injecting memory failure for pfn 0x184c4f at process virtual address 0x2049d000
[  452.324276][T15293] Memory failure: 0x184c4f: recovery action for dirty LRU page: Recovered
[  452.326195][T15293] Injecting memory failure for pfn 0x18566f at process virtual address 0x2049e000
[  452.328618][T15293] Memory failure: 0x18566f: recovery action for dirty LRU page: Recovered
[  452.331843][T15293] Injecting memory failure for pfn 0x17abbd at process virtual address 0x2049f000
[  452.338000][T15293] Memory failure: 0x17abbd: recovery action for dirty LRU page: Recovered
[  452.340968][T15293] Injecting memory failure for pfn 0x17aa5c at process virtual address 0x204a0000
[  452.343187][T15293] Memory failure: 0x17aa5c: recovery action for dirty LRU page: Recovered
[  452.345117][T15293] Injecting memory failure for pfn 0x17c027 at process virtual address 0x204a1000
[  452.347279][T15293] Memory failure: 0x17c027: recovery action for dirty LRU page: Recovered
[  452.349878][T15293] Injecting memory failure for pfn 0x17b6ab at process virtual address 0x204a2000
[  452.352033][T15293] Memory failure: 0x17b6ab: recovery action for dirty LRU page: Recovered
[  452.353931][T15293] Injecting memory failure for pfn 0x1788e4 at process virtual address 0x204a3000
[  452.356077][T15293] Memory failure: 0x1788e4: recovery action for dirty LRU page: Recovered
[  452.357982][T15293] Injecting memory failure for pfn 0x18a564 at process virtual address 0x204a4000
[  452.365430][T15293] Memory failure: 0x18a564: recovery action for dirty LRU page: Recovered
[  452.368474][T15293] Injecting memory failure for pfn 0x18a56c at process virtual address 0x204a5000
[  452.378764][T15293] Memory failure: 0x18a56c: recovery action for dirty LRU page: Recovered
[  452.382656][T15293] Injecting memory failure for pfn 0x18a0d7 at process virtual address 0x204a6000
[  452.389045][T15293] Memory failure: 0x18a0d7: recovery action for dirty LRU page: Recovered
[  452.391459][T15293] Injecting memory failure for pfn 0x181fcc at process virtual address 0x204a7000
[  452.397485][T15293] Memory failure: 0x181fcc: recovery action for dirty LRU page: Recovered
[  452.400301][T15293] Injecting memory failure for pfn 0x17e230 at process virtual address 0x204a8000
[  452.402614][T15293] Memory failure: 0x17e230: recovery action for dirty LRU page: Recovered
[  452.406009][T15293] Injecting memory failure for pfn 0x17b433 at process virtual address 0x204a9000
[  452.409245][T15293] Memory failure: 0x17b433: recovery action for dirty LRU page: Recovered
[  452.412440][T15293] Injecting memory failure for pfn 0x17abd7 at process virtual address 0x204aa000
[  452.417082][T15293] Memory failure: 0x17abd7: recovery action for dirty LRU page: Recovered
[  452.418988][T15293] Injecting memory failure for pfn 0x179f88 at process virtual address 0x204ab000
[  452.423009][T15293] Memory failure: 0x179f88: recovery action for dirty LRU page: Recovered
[  452.424949][T15293] Injecting memory failure for pfn 0x1783e9 at process virtual address 0x204ac000
[  452.427156][T15293] Memory failure: 0x1783e9: recovery action for dirty LRU page: Recovered
[  452.429164][T15293] Injecting memory failure for pfn 0x17b7b2 at process virtual address 0x204ad000
[  452.432266][T15293] Memory failure: 0x17b7b2: recovery action for dirty LRU page: Recovered
[  452.434285][T15293] Injecting memory failure for pfn 0x17357c at process virtual address 0x204ae000
[  452.443486][T15293] Memory failure: 0x17357c: recovery action for dirty LRU page: Recovered
[  452.445364][T15293] Injecting memory failure for pfn 0x17a378 at process virtual address 0x204af000
[  452.449934][T15293] Memory failure: 0x17a378: recovery action for dirty LRU page: Recovered
[  452.451732][T15293] Injecting memory failure for pfn 0x17c042 at process virtual address 0x204b0000
[  452.455750][T15293] Memory failure: 0x17c042: recovery action for dirty LRU page: Recovered
[  452.457833][T15293] Injecting memory failure for pfn 0x17dc37 at process virtual address 0x204b1000
[  452.469929][T15293] Memory failure: 0x17dc37: recovery action for dirty LRU page: Recovered
[  452.471840][T15293] Injecting memory failure for pfn 0x17e099 at process virtual address 0x204b2000
[  452.473972][T15293] Memory failure: 0x17e099: recovery action for dirty LRU page: Recovered
[  452.476552][T15293] Injecting memory failure for pfn 0x17b835 at process virtual address 0x204b3000
[  452.478648][T15293] Memory failure: 0x17b835: recovery action for dirty LRU page: Recovered
[  452.487546][T15293] Injecting memory failure for pfn 0x174231 at process virtual address 0x204b4000
[  452.491051][T15293] Memory failure: 0x174231: recovery action for dirty LRU page: Recovered
[  452.493002][T15293] Injecting memory failure for pfn 0x18770d at process virtual address 0x204b5000
[  452.499038][T15293] Memory failure: 0x18770d: recovery action for dirty LRU page: Recovered
[  452.511015][T15293] Injecting memory failure for pfn 0x1bc00e at process virtual address 0x204b6000
[  452.518841][T15293] Memory failure: 0x1bc00e: recovery action for dirty LRU page: Recovered
[  452.520887][T15293] Injecting memory failure for pfn 0x179ca2 at process virtual address 0x204b7000
[  452.528470][T15293] Memory failure: 0x179ca2: recovery action for dirty LRU page: Recovered
[  452.536191][T15293] Injecting memory failure for pfn 0x18822f at process virtual address 0x204b8000
[  452.538545][T15293] Memory failure: 0x18822f: recovery action for dirty LRU page: Recovered
[  452.540926][T15293] Injecting memory failure for pfn 0x1864ee at process virtual address 0x204b9000
[  452.543272][T15293] Memory failure: 0x1864ee: recovery action for dirty LRU page: Recovered
[  452.545222][T15293] Injecting memory failure for pfn 0x1bc1fa at process virtual address 0x204ba000
[  452.547346][T15293] Memory failure: 0x1bc1fa: recovery action for dirty LRU page: Recovered
[  452.549278][T15293] Injecting memory failure for pfn 0x1836ce at process virtual address 0x204bb000
[  452.553281][T15293] Memory failure: 0x1836ce: recovery action for dirty LRU page: Recovered
[  452.555001][T15293] Injecting memory failure for pfn 0x187c02 at process virtual address 0x204bc000
[  452.557011][T15293] Memory failure: 0x187c02: recovery action for dirty LRU page: Recovered
[  452.558811][T15293] Injecting memory failure for pfn 0x1776b2 at process virtual address 0x204bd000
[  452.560971][T15293] Memory failure: 0x1776b2: recovery action for dirty LRU page: Recovered
[  452.562824][T15293] Injecting memory failure for pfn 0x1bb00e at process virtual address 0x204be000
[  452.564718][T15293] Memory failure: 0x1bb00e: recovery action for dirty LRU page: Recovered
[  452.566546][T15293] Injecting memory failure for pfn 0x186192 at process virtual address 0x204bf000
[  452.568558][T15293] Memory failure: 0x186192: recovery action for dirty LRU page: Recovered
[  452.570473][T15293] Injecting memory failure for pfn 0x1752d0 at process virtual address 0x204c0000
[  452.572396][T15293] Memory failure: 0x1752d0: recovery action for dirty LRU page: Recovered
[  452.574233][T15293] Injecting memory failure for pfn 0x186871 at process virtual address 0x204c1000
[  452.576483][T15293] Memory failure: 0x186871: recovery action for dirty LRU page: Recovered
[  452.578317][T15293] Injecting memory failure for pfn 0x17c057 at process virtual address 0x204c2000
[  452.580401][T15293] Memory failure: 0x17c057: recovery action for dirty LRU page: Recovered
[  452.582309][T15293] Injecting memory failure for pfn 0x17e42b at process virtual address 0x204c3000
[  452.584252][T15293] Memory failure: 0x17e42b: recovery action for dirty LRU page: Recovered
[  452.586069][T15293] Injecting memory failure for pfn 0x183c3e at process virtual address 0x204c4000
[  452.588009][T15293] Memory failure: 0x183c3e: recovery action for dirty LRU page: Recovered
[  452.589914][T15293] Injecting memory failure for pfn 0x1771d4 at process virtual address 0x204c5000
[  452.591971][T15293] Memory failure: 0x1771d4: recovery action for dirty LRU page: Recovered
[  452.593814][T15293] Injecting memory failure for pfn 0x1ba208 at process virtual address 0x204c6000
[  452.595764][T15293] Memory failure: 0x1ba208: recovery action for dirty LRU page: Recovered
[  452.597577][T15293] Injecting memory failure for pfn 0x1bc82d at process virtual address 0x204c7000
[  452.600943][T15293] Memory failure: 0x1bc82d: recovery action for dirty LRU page: Recovered
[  452.602791][T15293] Injecting memory failure for pfn 0x1895c4 at process virtual address 0x204c8000
[  452.604713][T15293] Memory failure: 0x1895c4: recovery action for dirty LRU page: Recovered
[  452.606562][T15293] Injecting memory failure for pfn 0x1bba2a at process virtual address 0x204c9000
[  452.608689][T15293] Memory failure: 0x1bba2a: recovery action for dirty LRU page: Recovered
[  452.610676][T15293] Injecting memory failure for pfn 0x1bca61 at process virtual address 0x204ca000
[  452.612789][T15293] Memory failure: 0x1bca61: recovery action for dirty LRU page: Recovered
[  452.614620][T15293] Injecting memory failure for pfn 0x1bca6b at process virtual address 0x204cb000
[  452.616555][T15293] Memory failure: 0x1bca6b: recovery action for dirty LRU page: Recovered
[  452.618358][T15293] Injecting memory failure for pfn 0x1bcb45 at process virtual address 0x204cc000
[  452.620508][T15293] Memory failure: 0x1bcb45: recovery action for dirty LRU page: Recovered
[  452.622369][T15293] Injecting memory failure for pfn 0x1bc0c8 at process virtual address 0x204cd000
[  452.624366][T15293] Memory failure: 0x1bc0c8: recovery action for dirty LRU page: Recovered
[  452.626111][T15293] Injecting memory failure for pfn 0x1bc0c7 at process virtual address 0x204ce000
[  452.628138][T15293] Memory failure: 0x1bc0c7: recovery action for dirty LRU page: Recovered
[  452.629996][T15293] Injecting memory failure for pfn 0x1bb80a at process virtual address 0x204cf000
[  452.632021][T15293] Memory failure: 0x1bb80a: recovery action for dirty LRU page: Recovered
[  452.633855][T15293] Injecting memory failure for pfn 0x17a224 at process virtual address 0x204d0000
[  452.635960][T15293] Memory failure: 0x17a224: recovery action for dirty LRU page: Recovered
[  452.637750][T15293] Injecting memory failure for pfn 0x17a6eb at process virtual address 0x204d1000
[  452.639820][T15293] Memory failure: 0x17a6eb: recovery action for dirty LRU page: Recovered
[  452.641729][T15293] Injecting memory failure for pfn 0x17a570 at process virtual address 0x204d2000
[  452.643655][T15293] Memory failure: 0x17a570: recovery action for dirty LRU page: Recovered
[  452.645436][T15293] Injecting memory failure for pfn 0x1784f5 at process virtual address 0x204d3000
[  452.647510][T15293] Memory failure: 0x1784f5: recovery action for dirty LRU page: Recovered
[  452.649458][T15293] Injecting memory failure for pfn 0x17c333 at process virtual address 0x204d4000
[  452.651409][T15293] Memory failure: 0x17c333: recovery action for dirty LRU page: Recovered
[  452.653272][T15293] Injecting memory failure for pfn 0x17866f at process virtual address 0x204d5000
[  452.655231][T15293] Memory failure: 0x17866f: recovery action for dirty LRU page: Recovered
[  452.657026][T15293] Injecting memory failure for pfn 0x17ad50 at process virtual address 0x204d6000
[  452.658966][T15293] Memory failure: 0x17ad50: recovery action for dirty LRU page: Recovered
[  452.661021][T15293] Injecting memory failure for pfn 0x181fb2 at process virtual address 0x204d7000
[  452.663072][T15293] Memory failure: 0x181fb2: recovery action for dirty LRU page: Recovered
[  452.664892][T15293] Injecting memory failure for pfn 0x1835c5 at process virtual address 0x204d8000
[  452.666810][T15293] Memory failure: 0x1835c5: recovery action for dirty LRU page: Recovered
[  452.668659][T15293] Injecting memory failure for pfn 0x17abac at process virtual address 0x204d9000
[  452.670777][T15293] Memory failure: 0x17abac: recovery action for dirty LRU page: Recovered
[  452.672611][T15293] Injecting memory failure for pfn 0x187918 at process virtual address 0x204da000
[  452.674762][T15293] Memory failure: 0x187918: recovery action for dirty LRU page: Recovered
[  452.676580][T15293] Injecting memory failure for pfn 0x179f0c at process virtual address 0x204db000
[  452.678634][T15293] Memory failure: 0x179f0c: recovery action for dirty LRU page: Recovered
[  452.680594][T15293] Injecting memory failure for pfn 0x175561 at process virtual address 0x204dc000
[  452.682607][T15293] Memory failure: 0x175561: recovery action for dirty LRU page: Recovered
[  452.684422][T15293] Injecting memory failure for pfn 0x17ddac at process virtual address 0x204dd000
[  452.686370][T15293] Memory failure: 0x17ddac: recovery action for dirty LRU page: Recovered
[  452.688177][T15293] Injecting memory failure for pfn 0x17e42c at process virtual address 0x204de000
[  452.690220][T15293] Memory failure: 0x17e42c: recovery action for dirty LRU page: Recovered
[  452.692117][T15293] Injecting memory failure for pfn 0x17e109 at process virtual address 0x204df000
[  452.694102][T15293] Memory failure: 0x17e109: recovery action for dirty LRU page: Recovered
[  452.695928][T15293] Injecting memory failure for pfn 0x17d71b at process virtual address 0x204e0000
[  452.697840][T15293] Memory failure: 0x17d71b: recovery action for dirty LRU page: Recovered
[  452.699793][T15293] Injecting memory failure for pfn 0x17b8a3 at process virtual address 0x204e1000
[  452.701769][T15293] Memory failure: 0x17b8a3: recovery action for dirty LRU page: Recovered
[  452.703546][T15293] Injecting memory failure for pfn 0x173198 at process virtual address 0x204e2000
[  452.705667][T15293] Memory failure: 0x173198: recovery action for dirty LRU page: Recovered
[  452.707468][T15293] Injecting memory failure for pfn 0x179ec3 at process virtual address 0x204e3000
[  452.710843][T15293] Memory failure: 0x179ec3: recovery action for dirty LRU page: Recovered
[  452.712586][T15293] Injecting memory failure for pfn 0x17488f at process virtual address 0x204e4000
[  452.714621][T15293] Memory failure: 0x17488f: recovery action for dirty LRU page: Recovered
[  452.716536][T15293] Injecting memory failure for pfn 0x178028 at process virtual address 0x204e5000
[  452.718469][T15293] Memory failure: 0x178028: recovery action for dirty LRU page: Recovered
[  452.720341][T15293] Injecting memory failure for pfn 0x17461d at process virtual address 0x204e6000
[  452.722361][T15293] Memory failure: 0x17461d: recovery action for dirty LRU page: Recovered
[  452.724260][T15293] Injecting memory failure for pfn 0x17b393 at process virtual address 0x204e7000
[  452.726417][T15293] Memory failure: 0x17b393: recovery action for dirty LRU page: Recovered
[  452.728235][T15293] Injecting memory failure for pfn 0x17bac7 at process virtual address 0x204e8000
[  452.730303][T15293] Memory failure: 0x17bac7: recovery action for dirty LRU page: Recovered
[  452.732138][T15293] Injecting memory failure for pfn 0x187949 at process virtual address 0x204e9000
[  452.734009][T15293] Memory failure: 0x187949: recovery action for dirty LRU page: Recovered
[  452.735723][T15293] Injecting memory failure for pfn 0x177970 at process virtual address 0x204ea000
[  452.737659][T15293] Memory failure: 0x177970: recovery action for dirty LRU page: Recovered
[  452.739659][T15293] Injecting memory failure for pfn 0x1854da at process virtual address 0x204eb000
[  452.741700][T15293] Memory failure: 0x1854da: recovery action for dirty LRU page: Recovered
[  452.743545][T15293] Injecting memory failure for pfn 0x186f3d at process virtual address 0x204ec000
[  452.745468][T15293] Memory failure: 0x186f3d: recovery action for dirty LRU page: Recovered
[  452.747189][T15293] Injecting memory failure for pfn 0x17d750 at process virtual address 0x204ed000
[  452.749193][T15293] Memory failure: 0x17d750: recovery action for dirty LRU page: Recovered
[  452.751037][T15293] Injecting memory failure for pfn 0x179ecc at process virtual address 0x204ee000
[  452.753160][T15293] Memory failure: 0x179ecc: recovery action for dirty LRU page: Recovered
[  452.754949][T15293] Injecting memory failure for pfn 0x17aa3f at process virtual address 0x204ef000
[  452.756923][T15293] Memory failure: 0x17aa3f: recovery action for dirty LRU page: Recovered
[  452.758638][T15293] Injecting memory failure for pfn 0x1bc0a5 at process virtual address 0x204f0000
[  452.760701][T15293] Memory failure: 0x1bc0a5: recovery action for dirty LRU page: Recovered
[  452.762552][T15293] Injecting memory failure for pfn 0x1779a4 at process virtual address 0x204f1000
[  452.764560][T15293] Memory failure: 0x1779a4: recovery action for dirty LRU page: Recovered
[  452.766468][T15293] Injecting memory failure for pfn 0x177a25 at process virtual address 0x204f2000
[  452.768572][T15293] Memory failure: 0x177a25: recovery action for dirty LRU page: Recovered
[  452.770460][T15293] Injecting memory failure for pfn 0x185cb5 at process virtual address 0x204f3000
[  452.772596][T15293] Memory failure: 0x185cb5: recovery action for dirty LRU page: Recovered
[  452.774431][T15293] Injecting memory failure for pfn 0x17a226 at process virtual address 0x204f4000
[  452.776367][T15293] Memory failure: 0x17a226: recovery action for dirty LRU page: Recovered
[  452.778026][T15293] Injecting memory failure for pfn 0x178c4e at process virtual address 0x204f5000
[  452.780123][T15293] Memory failure: 0x178c4e: recovery action for dirty LRU page: Recovered
[  452.781917][T15293] Injecting memory failure for pfn 0x17732e at process virtual address 0x204f6000
[  452.783880][T15293] Memory failure: 0x17732e: recovery action for dirty LRU page: Recovered
[  452.785691][T15293] Injecting memory failure for pfn 0x174e8a at process virtual address 0x204f7000
[  452.787540][T15293] Memory failure: 0x174e8a: recovery action for dirty LRU page: Recovered
[  452.789440][T15293] Injecting memory failure for pfn 0x17940b at process virtual address 0x204f8000
[  452.791829][T15293] Memory failure: 0x17940b: recovery action for dirty LRU page: Recovered
[  452.793545][T15293] Injecting memory failure for pfn 0x186f54 at process virtual address 0x204f9000
[  452.795531][T15293] Memory failure: 0x186f54: recovery action for dirty LRU page: Recovered
[  452.797332][T15293] Injecting memory failure for pfn 0x187835 at process virtual address 0x204fa000
[  452.799415][T15293] Memory failure: 0x187835: recovery action for dirty LRU page: Recovered
[  452.801130][T15293] Injecting memory failure for pfn 0x17489a at process virtual address 0x204fb000
[  452.802999][T15293] Memory failure: 0x17489a: recovery action for dirty LRU page: Recovered
[  452.804732][T15293] Injecting memory failure for pfn 0x179deb at process virtual address 0x204fc000
[  452.806640][T15293] Memory failure: 0x179deb: recovery action for dirty LRU page: Recovered
[  452.808371][T15293] Injecting memory failure for pfn 0x182ac2 at process virtual address 0x204fd000
[  452.810370][T15293] Memory failure: 0x182ac2: recovery action for dirty LRU page: Recovered
[  452.812082][T15293] Injecting memory failure for pfn 0x18314e at process virtual address 0x204fe000
[  452.813936][T15293] Memory failure: 0x18314e: recovery action for dirty LRU page: Recovered
[  452.815615][T15293] Injecting memory failure for