Extracting prog: 39.578463084s
Minimizing prog: 25m57.68809311s
Simplifying prog options: 0s
Extracting C: 26.766707984s
Simplifying C: 3m7.808838605s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-nanosleep-syz_open_dev$ublk_bdev-pwrite64$ublk_bdev-syz_ublk_process_io
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=<r8=>0x0)
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r9 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0)
r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002)
pwrite64$ublk_bdev(r10, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0)
syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-nanosleep-syz_open_dev$ublk_bdev-pwrite64$ublk_bdev
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0)
r9 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002)
pwrite64$ublk_bdev(r9, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-nanosleep-syz_open_dev$ublk_bdev
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0)
syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-nanosleep
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-syz_io_uring_submit$UBLK
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-getpid-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
getpid()
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-nanosleep-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_open_dev$ublk_chdev-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300))
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
r6 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r6}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r7 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r7}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-syz_io_uring_submit$UBLK-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_complete-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r2, r3)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_io_uring_submit$UBLK-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}})
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r5 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2)
syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r6 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0, r6}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r2=>0x0)
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r1, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)
r3 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r1, 0x2)
syz_ublk_setup_queues(r3, r2, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r4 = getpid()
syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r1, 0xffff, 0x0, 0x0, r4}})
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r5=>0x0)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r7 = getpid()
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x0, 0x0, r7}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r5=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(0x0, r2, r3, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r7 = getpid()
syz_io_uring_submit$UBLK(0x0, r2, r3, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x0, 0x0, r7}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, 0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r5=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, 0x0, r3, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r7 = getpid()
syz_io_uring_submit$UBLK(r2, 0x0, r3, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x0, 0x0, r7}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, 0x0)
r4 = syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r5=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, 0x0, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r7 = getpid()
syz_io_uring_submit$UBLK(r2, r3, 0x0, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x0, 0x0, r7}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, 0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r7 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r7}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, 0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(0x0, r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, 0x0, &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), 0x0, 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, 0x0, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00))
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, 0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
program crashed: WARNING: suspicious RCU usage in mas_start
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ublk_ctrl-syz_ublk_setup_io_uring-syz_ublk_add_dev-io_uring_enter-syz_io_uring_submit$UBLK-io_uring_enter-syz_open_dev$ublk_chdev-syz_ublk_setup_queues-getpid-syz_io_uring_submit$UBLK-io_uring_enter
detailed listing:
executing program 0:
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=<r6=>0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
r8 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

program crashed: WARNING: suspicious RCU usage in mas_start
validation run: crashed=true
reproducing took 31m45.678421774s
repro crashed as (corrupted=false):
=============================
WARNING: suspicious RCU usage
syzkaller #0 Not tainted
-----------------------------
lib/maple_tree.c:720 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
locks held by syz.0.17/5926: 1, last CPU#0:
 #0: ffff888034a420a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x1cd/0xbf0 io_uring/tw.c:92

stack backtrace:
CPU: 0 UID: 0 PID: 5926 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 lockdep_rcu_suspicious.cold+0x4f/0xb2 kernel/locking/lockdep.c:6972
 mas_root lib/maple_tree.c:720 [inline]
 mas_start+0x621/0x7c0 lib/maple_tree.c:1250
 mas_state_walk lib/maple_tree.c:3006 [inline]
 mas_walk+0x82/0x310 lib/maple_tree.c:4458
 ublk_try_buf_match+0x469/0x7e0 drivers/block/ublk_drv.c:5639
 ublk_init_iod+0x4a4/0x5b0 drivers/block/ublk_drv.c:521
 ublk_setup_iod+0x145/0x2f0 drivers/block/ublk_drv.c:1536
 ublk_dispatch_req+0x4e/0xb00 drivers/block/ublk_drv.c:1776
 ublk_cmd_tw_cb+0xbe/0x110 drivers/block/ublk_drv.c:2067
 tctx_task_work_run+0xabe/0xbf0 io_uring/tw.c:96
 tctx_task_work+0x7a/0xa0 io_uring/tw.c:133
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x951/0x2ae0 kernel/exit.c:1011
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1154
 __do_sys_exit_group kernel/exit.c:1165 [inline]
 __se_sys_exit_group kernel/exit.c:1163 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1163
 x64_sys_call+0x1567/0x1570 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f35df99e159
Code: Unable to access opcode bytes at 0x7f35df99e12f.
RSP: 002b:00007ffcaa2c82b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f35df99e159
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 0000000000000000 R09: 00007f35dfbec3e0
R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f35dfbec3e0 R14: 0000000000000003 R15: 00007ffcaa2c8370
 </TASK>
I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
Buffer I/O error on dev ublkb0, logical block 0, async page read

final repro crashed as (corrupted=false):
=============================
WARNING: suspicious RCU usage
syzkaller #0 Not tainted
-----------------------------
lib/maple_tree.c:720 suspicious rcu_dereference_check() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
locks held by syz.0.17/5926: 1, last CPU#0:
 #0: ffff888034a420a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x1cd/0xbf0 io_uring/tw.c:92

stack backtrace:
CPU: 0 UID: 0 PID: 5926 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 lockdep_rcu_suspicious.cold+0x4f/0xb2 kernel/locking/lockdep.c:6972
 mas_root lib/maple_tree.c:720 [inline]
 mas_start+0x621/0x7c0 lib/maple_tree.c:1250
 mas_state_walk lib/maple_tree.c:3006 [inline]
 mas_walk+0x82/0x310 lib/maple_tree.c:4458
 ublk_try_buf_match+0x469/0x7e0 drivers/block/ublk_drv.c:5639
 ublk_init_iod+0x4a4/0x5b0 drivers/block/ublk_drv.c:521
 ublk_setup_iod+0x145/0x2f0 drivers/block/ublk_drv.c:1536
 ublk_dispatch_req+0x4e/0xb00 drivers/block/ublk_drv.c:1776
 ublk_cmd_tw_cb+0xbe/0x110 drivers/block/ublk_drv.c:2067
 tctx_task_work_run+0xabe/0xbf0 io_uring/tw.c:96
 tctx_task_work+0x7a/0xa0 io_uring/tw.c:133
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x951/0x2ae0 kernel/exit.c:1011
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1154
 __do_sys_exit_group kernel/exit.c:1165 [inline]
 __se_sys_exit_group kernel/exit.c:1163 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1163
 x64_sys_call+0x1567/0x1570 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f35df99e159
Code: Unable to access opcode bytes at 0x7f35df99e12f.
RSP: 002b:00007ffcaa2c82b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f35df99e159
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 0000000000000000 R09: 00007f35dfbec3e0
R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f35dfbec3e0 R14: 0000000000000003 R15: 00007ffcaa2c8370
 </TASK>
I/O error, dev ublkb0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
Buffer I/O error on dev ublkb0, logical block 0, async page read