Extracting prog: 10h31m53.921532351s
Minimizing prog: 1h32m6.760601597s
Simplifying prog options: 0s
Extracting C: 1m4.703988081s
Simplifying C: 10m2.709094611s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 32, 4, 24, 7, 27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 28, 5, 30, 6, 21, 1, 14, 19, 7, 24]
detailed listing:
executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
close(r1)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./p\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./p\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./p/asound/card0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0)
getpid()
getpid()
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000500)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000580)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r5)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r6, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
executing program 4:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000000100), 0x3e8)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r1, &(0x7f0000000100), 0x3e8)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r2, &(0x7f0000000100), 0x3e8)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r3, &(0x7f0000000100), 0x3e8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000260)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/snd_hda_intel\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000300), 0x3e8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/sound\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000500), 0x3e8)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 32, 4, 24, 7, 27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 28, 5, 30, 6, 21, 1, 14, 19, 7, 24]
detailed listing:
executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
close(r1)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./p\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./p\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./p/asound/card0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0)
getpid()
getpid()
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000500)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000580)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r5)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r6, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
executing program 4:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000000100), 0x3e8)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r1, &(0x7f0000000100), 0x3e8)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r2, &(0x7f0000000100), 0x3e8)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r3, &(0x7f0000000100), 0x3e8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000260)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/snd_hda_intel\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000300), 0x3e8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/sound\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000500), 0x3e8)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)

program crashed: kernel BUG in mark_free_pages
bisect: bisecting 30 programs
bisect: split chunks (needed=false): <29>
bisect: split chunk #0 of len 29 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 28, 5, 30, 6, 21, 1, 14, 19, 7, 24]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000500)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000580)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r5)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r6, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
executing program 4:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000000100), 0x3e8)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r1, &(0x7f0000000100), 0x3e8)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r2, &(0x7f0000000100), 0x3e8)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r3, &(0x7f0000000100), 0x3e8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000260)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/snd_hda_intel\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000300), 0x3e8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/sound\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000500), 0x3e8)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 32, 4, 24, 7, 27, 30, 24, 28, 21, 28, 5, 30, 6, 21, 1, 14, 19, 7, 24]
detailed listing:
executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
close(r1)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./p\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./p\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./p/asound/card0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0)
getpid()
getpid()
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000500)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000580)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r5)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r6, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0)
executing program 4:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000000100), 0x3e8)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r1, &(0x7f0000000100), 0x3e8)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r2, &(0x7f0000000100), 0x3e8)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r3, &(0x7f0000000100), 0x3e8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000260)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/snd_hda_intel\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000300), 0x3e8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/sound\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000500), 0x3e8)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 32, 4, 24, 7, 27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
close(r1)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./p\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./p\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./p/asound/card0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0)
getpid()
getpid()
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <10>, <10>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: split chunks (needed=true): <5>, <5>, <5>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: split chunk #1 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 5, 14, 12, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: split chunk #2 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 6]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: split chunks (needed=true): <3>, <2>, <3>, <2>, <3>, <2>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: split chunk #2 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 12, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 5, 14, 7, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: split chunk #3 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 5, 14, 12, 19, 32, 24, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #4 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 5, 14, 12, 19, 3, 32, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #5 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 5, 14, 12, 19, 3, 24, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 2:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 28, 21, 5, 14, 12, 19, 3, 32, 6]
detailed listing:
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
bisect: too many guilty chunks, aborting
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 6m0s
testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 32, 4, 24, 7, 27, 30, 24, 28, 21, 5, 14, 12, 7, 19, 32, 24, 3, 32, 24, 28, 5, 30, 6, 21, 1, 14, 19, 7, 24]
detailed listing:
executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
close(r1)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./p\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./p\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./p/asound/card0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/1024, 0x400)
executing program 3:
r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000800)='ns/net\x00')
setns(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='ipv4\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='4420\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r6)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0)
getpid()
getpid()
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='Y\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000380)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000400)='* /tmp 2147483647 9218 0 0 0\n', 0x1d)
close(r5)
nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testfile\x00', 0x2, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000140), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000010000001,wwpn=0x1000000010000002\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002\n', 0x62)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='1\n', 0x2)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r5, &(0x7f0000000580)='fc\n', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c)
close(r6)
symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
executing program 1:
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/s1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/s1/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='tcp\n', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='ipv4\n', 0x5)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f00000003c0)='127.0.0.1\n', 0xa)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='4420\n', 0x5)
close(r4)
symlinkat(&(0x7f0000000480)='./config/nvmet/subsystems/s1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/subsystems/s1\x00')
r5 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000600)={{}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
close(r5)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='wwnn=0x1000000044001123,wwpn=0x2000000044001123\n', 0x30)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123\n', 0x64)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='fc\n', 0x3)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='nn-0x1000000044001122:pn-0x2000000044001122\n', 0x2e)
close(r5)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000880)='transport=fc,traddr=nn-0x1000000044001122:pn-0x2000000044001122,host_traddr=nn-0x1000000044001123:pn-0x2000000044001123,nqn=testsubsys,hostnqn=nqn.2014-08.org.nvmexpress:uuid:00000000-0000-0000-0000-000000000001\n', 0xd1)
executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount(&(0x7f0000000040), &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580)='fc\n', 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00', 0x0)
executing program 0:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c95f63000001000000010902200001010080320904000002ff0000000705010240000007058102400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/hwmon/hwmon0/in4_label\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/64, 0x40)
close(r0)
read(0xffffffffffffffff, &(0x7f0000000700)=""/64, 0x40)
close(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/hwmon/hwmon2/in4_label\x00', 0x0, 0x0)
read(r1, &(0x7f0000000900)=""/64, 0x40)
close(r1)
read(0xffffffffffffffff, &(0x7f0000000b00)=""/64, 0x40)
close(0xffffffffffffffff)
executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
read(r6, &(0x7f0000002000)=""/4096, 0x1000)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x

<<cut 373751 bytes out>>

= openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 17, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 17, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='100000000\x00', 0x9)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000500)=<r3=>0x0, &(0x7f0000000540)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 16, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 15, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000140)='2\x00', 0x1)
close(0xffffffffffffffff)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r0=>0x0, &(0x7f0000000500)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_io_uring_submit(r0, r1, r2, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 13, 3, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
minimized 19 calls -> 14 calls
minimizing program #2 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 2, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 0:
socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 2, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 2, 32, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
write(r12, &(0x7f0000000700)='offline\n', 0x8)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
minimized 3 calls -> 3 calls
minimizing program #3 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 31, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r11, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 30, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory12/state\x00', 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 29, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r10, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 28, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory13/state\x00', 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 27, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r9, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 26, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 25, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 24, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 23, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 22, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory32/state\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 21, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 20, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 19, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 19, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 18, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 18, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 17, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 16, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 16, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='1\n', 0x2)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 16, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/compact_memory\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 15, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 14, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 14, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 13, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 6, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 0:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
minimized 32 calls -> 12 calls
minimizing program #4 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 5, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 5, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='freezer\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 5, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 3, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 3, 21]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 0:
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x2}, 0x0)

program did not crash
minimized 6 calls -> 4 calls
minimizing program #5 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 20]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 19]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 18]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)
close(r4)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 17]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)
shutdown(r4, 0x2)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 16]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)
close(r3)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 15]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)
shutdown(r3, 0x2)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 14]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)
write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 13]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)='PASV\r\n', 0x6)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 12]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 11]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 10]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
socket$inet_tcp(0x2, 0x1, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 9]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 8]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 7]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x1, 0x1}, 0xc)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 6]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 5]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)
listen(r1, 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 4]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 3]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 2]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 1]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)

program crashed: kernel BUG in mark_free_pages
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 14, 3, 12, 4, 0]
detailed listing:
executing program 2:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='2\x00', 0x1)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
executing program 1:
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='disk\n', 0x5)
executing program 0:

program crashed: kernel BUG in mark_free_pages
minimized 21 calls -> 0 calls
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-openat-mkdirat-mount-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
bisect: concatenation succeeded
found reproducer with 38 syscalls
minimizing guilty program
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-openat-mkdirat-mount-openat
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-openat-mkdirat-mount-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-openat-mkdirat-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-openat-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory7/state\x00', 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-openat-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-write-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
write(0xffffffffffffffff, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r8, &(0x7f0000000700)='offline\n', 0x8)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r9, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory11/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory34/state\x00', 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mkdirat-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-write-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-ioctl$sock_ifreq-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r7, &(0x7f0000000700)='offline\n', 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r8, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-socket$nl_route-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-socket$inet-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-openat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-syz_io_uring_submit-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='offline\n', 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r7, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-syz_io_uring_setup-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-close-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-write-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-close-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-write-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='2\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='offline\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-openat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-read-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write(r1, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
read(r0, &(0x7f0000800000)=""/64, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='offline\n', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-write-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write(r0, &(0x7f0000000240)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='offline\n', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-pipe2-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
pipe2(&(0x7f0000000200), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)

program did not crash
testing program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m26.001844718s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
simplifying C reproducer
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing compiled C program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
program crashed: kernel BUG in mark_free_pages
testing program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
validation run: crashed=true
testing program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
validation run: crashed=true
testing program (duration=1m26.001844718s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory9/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='offline\n', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='disk\n', 0x5)

program crashed: kernel BUG in mark_free_pages
validation run: crashed=true
reproducing took 12h19m54.88136092s
repro crashed as (corrupted=false):
Freezing user space processes
Freezing user space processes completed (elapsed 0.008 seconds)
OOM killer disabled.
PM: hibernation: Preallocating image memory
page:ffffea0001200000 is uninitialized and poisoned
page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page))
There is not page extension available.
------------[ cut here ]------------
kernel BUG at ./include/linux/mm.h:2571!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 5884 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:page_to_nid include/linux/mm.h:2571 [inline]
RIP: 0010:page_zone include/linux/mm.h:2791 [inline]
RIP: 0010:mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1267
Code: 5d e9 46 dc 48 0a e8 d1 0e 23 00 90 0f 0b e8 a9 11 46 0a e8 c4 0e 23 00 48 8b 7c 24 08 48 c7 c6 e4 ac 4a 8e e8 b3 aa 82 ff 90 <0f> 0b e8 ab 0e 23 00 90 0f 0b e8 a3 0e 23 00 90 0f 0b 90 90 90 90
RSP: 0018:ffffc900032a7ad8 EFLAGS: 00010046
RAX: 6da7ae053da74c00 RBX: 0000000000018fff RCX: 6da7ae053da74c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ec33e80
RBP: 0000000000000000 R08: ffffffff8f695e03 R09: 1ffffffff1ed2bc0
R10: dffffc0000000000 R11: fffffbfff1ed2bc1 R12: ffff88813fffbb00
R13: 0000000000048000 R14: ffffffffffffffff R15: 0300000000000000
FS:  00005555609e2500(0000) GS:ffff888124cbd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa88e9c9e9c CR3: 0000000074654000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 count_data_pages kernel/power/snapshot.c:1418 [inline]
 hibernate_preallocate_memory+0x14f/0x750 kernel/power/snapshot.c:1860
 hibernation_snapshot+0xd5/0x3d0 kernel/power/hibernate.c:422
 hibernate+0x29f/0x6a0 kernel/power/hibernate.c:819
 state_store+0x234/0x290 kernel/power/main.c:821
 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x612/0xba0 fs/read_write.c:687
 ksys_write+0x150/0x270 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f00ef79e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe64ed94e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f00efa25fa0 RCX: 00007f00ef79e159
RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000004
RBP: 00007f00ef83506b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f00efa25fac R14: 00007f00efa25fa0 R15: 00007f00efa25fa0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:page_to_nid include/linux/mm.h:2571 [inline]
RIP: 0010:page_zone include/linux/mm.h:2791 [inline]
RIP: 0010:mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1267
Code: 5d e9 46 dc 48 0a e8 d1 0e 23 00 90 0f 0b e8 a9 11 46 0a e8 c4 0e 23 00 48 8b 7c 24 08 48 c7 c6 e4 ac 4a 8e e8 b3 aa 82 ff 90 <0f> 0b e8 ab 0e 23 00 90 0f 0b e8 a3 0e 23 00 90 0f 0b 90 90 90 90
RSP: 0018:ffffc900032a7ad8 EFLAGS: 00010046
RAX: 6da7ae053da74c00 RBX: 0000000000018fff RCX: 6da7ae053da74c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ec33e80
RBP: 0000000000000000 R08: ffffffff8f695e03 R09: 1ffffffff1ed2bc0
R10: dffffc0000000000 R11: fffffbfff1ed2bc1 R12: ffff88813fffbb00
R13: 0000000000048000 R14: ffffffffffffffff R15: 0300000000000000
FS:  00005555609e2500(0000) GS:ffff888124cbd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa88e9c9e9c CR3: 0000000074654000 CR4: 00000000003526f0

final repro crashed as (corrupted=false):
Freezing user space processes
Freezing user space processes completed (elapsed 0.008 seconds)
OOM killer disabled.
PM: hibernation: Preallocating image memory
page:ffffea0001200000 is uninitialized and poisoned
page dumped because: VM_BUG_ON_PAGE(PagePoisoned(page))
There is not page extension available.
------------[ cut here ]------------
kernel BUG at ./include/linux/mm.h:2571!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 5884 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:page_to_nid include/linux/mm.h:2571 [inline]
RIP: 0010:page_zone include/linux/mm.h:2791 [inline]
RIP: 0010:mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1267
Code: 5d e9 46 dc 48 0a e8 d1 0e 23 00 90 0f 0b e8 a9 11 46 0a e8 c4 0e 23 00 48 8b 7c 24 08 48 c7 c6 e4 ac 4a 8e e8 b3 aa 82 ff 90 <0f> 0b e8 ab 0e 23 00 90 0f 0b e8 a3 0e 23 00 90 0f 0b 90 90 90 90
RSP: 0018:ffffc900032a7ad8 EFLAGS: 00010046
RAX: 6da7ae053da74c00 RBX: 0000000000018fff RCX: 6da7ae053da74c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ec33e80
RBP: 0000000000000000 R08: ffffffff8f695e03 R09: 1ffffffff1ed2bc0
R10: dffffc0000000000 R11: fffffbfff1ed2bc1 R12: ffff88813fffbb00
R13: 0000000000048000 R14: ffffffffffffffff R15: 0300000000000000
FS:  00005555609e2500(0000) GS:ffff888124cbd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa88e9c9e9c CR3: 0000000074654000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 count_data_pages kernel/power/snapshot.c:1418 [inline]
 hibernate_preallocate_memory+0x14f/0x750 kernel/power/snapshot.c:1860
 hibernation_snapshot+0xd5/0x3d0 kernel/power/hibernate.c:422
 hibernate+0x29f/0x6a0 kernel/power/hibernate.c:819
 state_store+0x234/0x290 kernel/power/main.c:821
 kernfs_fop_write_iter+0x3a4/0x540 fs/kernfs/file.c:345
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x612/0xba0 fs/read_write.c:687
 ksys_write+0x150/0x270 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f00ef79e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffe64ed94e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f00efa25fa0 RCX: 00007f00ef79e159
RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000004
RBP: 00007f00ef83506b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f00efa25fac R14: 00007f00efa25fa0 R15: 00007f00efa25fa0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:page_to_nid include/linux/mm.h:2571 [inline]
RIP: 0010:page_zone include/linux/mm.h:2791 [inline]
RIP: 0010:mark_free_pages+0x49e/0x4b0 kernel/power/snapshot.c:1267
Code: 5d e9 46 dc 48 0a e8 d1 0e 23 00 90 0f 0b e8 a9 11 46 0a e8 c4 0e 23 00 48 8b 7c 24 08 48 c7 c6 e4 ac 4a 8e e8 b3 aa 82 ff 90 <0f> 0b e8 ab 0e 23 00 90 0f 0b e8 a3 0e 23 00 90 0f 0b 90 90 90 90
RSP: 0018:ffffc900032a7ad8 EFLAGS: 00010046
RAX: 6da7ae053da74c00 RBX: 0000000000018fff RCX: 6da7ae053da74c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ec33e80
RBP: 0000000000000000 R08: ffffffff8f695e03 R09: 1ffffffff1ed2bc0
R10: dffffc0000000000 R11: fffffbfff1ed2bc1 R12: ffff88813fffbb00
R13: 0000000000048000 R14: ffffffffffffffff R15: 0300000000000000
FS:  00005555609e2500(0000) GS:ffff888124cbd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa88e9c9e9c CR3: 0000000074654000 CR4: 00000000003526f0