Extracting prog: 3m8.144035828s
Minimizing prog: 32m25.495907709s
Simplifying prog options: 4m39.997651943s
Extracting C: 1m43.471175937s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program crashed: BUG: corrupted list in blk_mq_request_bypass_insert
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000400)="62226ce753c264e304845d2c480d666fe830e14b29c1eab2edd7d13843a8d87eef1b062fa2904807dfe9a4829f4e0ca7a89fb1c983fb1d10889318c1c7d34bf92965db8a82d5ea3035705d62cbe14ae12c72114817f88bfb4320ce8075cc6244bfc28558cb5a884658f9f91e68f97b2695865cab558a9c3f509530a32e99f666564a38801c93cafd135b5bedcd73752e2e0069006c14fcdd757df0b6516ef0218929a62a358ac95978089e8b35cb1bc95ba4d329e6d3625bad542b189922e97487c370b0f4d1c26c608b1b75c825e5189312787a86778a8a2951ac809731099b8d9757bc461f8ca8deff88398a9ee9d38be5e042cb459511d0e3e3f0dd", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="62226ce753c264e304845d2c480d666fe830e14b29c1eab2edd7d13843a8d87eef1b062fa2904807dfe9a4829f4e0ca7a89fb1c983fb1d10889318c1c7d34bf92965db8a82d5ea3035705d62cbe14ae12c72114817f88bfb4320ce8075cc6244bfc28558cb5a884658f9f91e68f97b2695865cab558a9c3f509530a32e99f666564a38801c93cafd135b5bedcd73752e2e0069006c14fcdd757df0b6516ef0218929a62a358ac95978089e8b35cb1bc95ba4d329e6d3625bad542b189922e97487c370b0f4d1c26c608b1b75c825e5189312787a86778a8a2951ac809731099b8d9757bc461f8ca8deff88398a9ee9d38be5e042cb459511d0e3e3f0dd", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="62226ce753c264e304845d2c480d666fe830e14b29c1eab2edd7d13843a8d87eef1b062fa2904807dfe9a4829f4e0ca7a89fb1c983fb1d10889318c1c7d34bf92965db8a82d5ea3035705d62cbe14ae12c72114817f88bfb4320ce8075cc6244bfc28558cb5a884658f9f91e68f97b2695865cab558a9c3f509530a32e99f666564a38801c93cafd135b5bedcd73752e2e0069006c14fcdd757df0b6516ef0218929a62a358ac95978089e8b35cb1bc95ba4d329e6d3625bad542b189922e97487c370b0f4d1c26c608b1b75c825e5189312787a86778a8a2951ac809731099b8d9757bc461f8ca8deff88398a9ee9d38be5e042cb459511d0e3e3f0dd", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program crashed: BUG: corrupted list in blk_mq_request_bypass_insert
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
program did not crash
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program crashed: WARNING in blk_mq_dispatch_rq_list
a never seen crash title: WARNING in blk_mq_dispatch_rq_list, ignore
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program crashed: BUG: unable to handle kernel paging request in __blk_mq_alloc_driver_tag
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program crashed: BUG: unable to handle kernel paging request in __blk_mq_alloc_driver_tag
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl-mkdirat-mount-openat-write$binfmt_misc
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0)
ioctl(r0, 0xc0484e41, &(0x7f0000000a00))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000400)="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", 0xfd)

program crashed: BUG: corrupted list in blk_mq_request_bypass_insert
validation run: crashed=true
reproducing took 46m28.278489549s
repro crashed as (corrupted=false):
 non-slab/vmalloc memory
list_add corruption. prev->next should be next (ffff0000c812b840), but was ffff0000c8731248. (prev=ffff0000c8731248).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:34!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4388 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Workqueue: kblockd blk_mq_requeue_work
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32
lr : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32
sp : ffff8000976b79f0
x29: ffff8000976b79f0 x28: ffff8000976b7aa8 x27: ffff8000976b7aa0
x26: 1fffe00019025709 x25: ffff0000c812b840 x24: ffff0000c812b848
x23: 1fffe000190e6249 x22: dfff800000000000 x21: ffff0000c8731248
x20: ffff0000c8731248 x19: ffff0000c812b840 x18: 00000000ffffffff
x17: 3034386232313863 x16: 3030303066666666 x15: 28207478656e2065
x14: 0000000000000d23 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000000 x10: 0000000000000002 x9 : c50a2fd1c429bd00
x8 : c50a2fd1c429bd00 x7 : ffff800080482944 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008048d444
x2 : 0000000100000001 x1 : ffff0000c5143b00 x0 : 0000000000000075
Call trace:
 __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32 (P)
 __list_add_valid include/linux/list.h:104 [inline]
 __list_add include/linux/list.h:169 [inline]
 list_add_tail include/linux/list.h:206 [inline]
 blk_mq_request_bypass_insert+0x130/0x1cc block/blk-mq.c:2564
 blk_mq_requeue_work+0x3a4/0x52c block/blk-mq.c:1573
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
Code: 91230000 aa1303e1 aa1403e3 979c4bc9 (d4210000) 
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
 non-slab/vmalloc memory
list_add corruption. prev->next should be next (ffff0000c812b840), but was ffff0000c8731248. (prev=ffff0000c8731248).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:34!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 4388 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Workqueue: kblockd blk_mq_requeue_work
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32
lr : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32
sp : ffff8000976b79f0
x29: ffff8000976b79f0 x28: ffff8000976b7aa8 x27: ffff8000976b7aa0
x26: 1fffe00019025709 x25: ffff0000c812b840 x24: ffff0000c812b848
x23: 1fffe000190e6249 x22: dfff800000000000 x21: ffff0000c8731248
x20: ffff0000c8731248 x19: ffff0000c812b840 x18: 00000000ffffffff
x17: 3034386232313863 x16: 3030303066666666 x15: 28207478656e2065
x14: 0000000000000d23 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000000 x10: 0000000000000002 x9 : c50a2fd1c429bd00
x8 : c50a2fd1c429bd00 x7 : ffff800080482944 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008048d444
x2 : 0000000100000001 x1 : ffff0000c5143b00 x0 : 0000000000000075
Call trace:
 __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32 (P)
 __list_add_valid include/linux/list.h:104 [inline]
 __list_add include/linux/list.h:169 [inline]
 list_add_tail include/linux/list.h:206 [inline]
 blk_mq_request_bypass_insert+0x130/0x1cc block/blk-mq.c:2564
 blk_mq_requeue_work+0x3a4/0x52c block/blk-mq.c:1573
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
Code: 91230000 aa1303e1 aa1403e3 979c4bc9 (d4210000) 
---[ end trace 0000000000000000 ]---