program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000002a14000000180a05000000000000000000dc00000a140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x4040000) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x4000100) chdir(&(0x7f0000000180)='./bus\x00') set_mempolicy(0x1, &(0x7f0000000000)=0x366, 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) capset(&(0x7f0000000300)={0x20080522}, 0x0) r2 = syz_clone(0x80000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000200)='./bus\x00', 0x620f9, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x1, 0x5db1, &(0x7f0000011940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={0x0, 0x4000, 0x200000, 0x0, 0x0, [0x0], [0x6], [], [0x0, 0x6]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000100)=0x9) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00ZH?']) [ 70.706076][ T5089] Bluetooth: hci0: command tx timeout [ 71.535524][ T5104] loop0: detected capacity change from 0 to 32768 [ 71.548731][ T5104] ======================================================= [ 71.548731][ T5104] WARNING: The mand mount option has been deprecated and [ 71.548731][ T5104] and is ignored by this kernel. Remove the mand [ 71.548731][ T5104] option from the mount to silence this warning. [ 71.548731][ T5104] ======================================================= [ 71.564944][ T5106] coredump: 6(syz.0.0): written to core: VMAs: 35, size 55533568; core: 18090898 bytes, pos 55541760 [ 71.612807][ T5106] syz.0.0 (5106) used greatest stack depth: 18744 bytes left [ 71.808607][ T5104] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 71.812080][ T5104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 71.837265][ T5104] program syz.0.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.841219][ T5104] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 71.846036][ T5104] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 71.849042][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-10392-g68e5c7d4cefb #0 [ 71.852834][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.857090][ T5104] RIP: 0010:ata_msense_control+0x966/0x1cf0 [ 71.859535][ T5104] Code: b6 04 10 84 c0 0f 85 9b 0f 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 b6 0f 00 00 66 c7 03 00 e4 49 89 ec 49 c1 ec 03 <41> 0f b6 04 14 84 c0 0f 85 cc 0f 00 00 0f b6 5d 00 c0 e3 04 80 e3 [ 71.866335][ T5104] RSP: 0018:ffffc9000b13f068 EFLAGS: 00010046 [ 71.868268][ T5104] RAX: 0000000000000000 RBX: ffffffff9a718a76 RCX: ffffffff864b0862 [ 71.871268][ T5104] RDX: dffffc0000000000 RSI: ffffffff8c921080 RDI: ffffffff9a718a75 [ 71.875537][ T5104] RBP: 0000000000000000 R08: 0000000000020a0a R09: 1e00ffff00000000 [ 71.878306][ T5104] R10: dffffc0000000000 R11: fffffbfff34e314f R12: 0000000000000000 [ 71.881102][ T5104] R13: ffffffff9a718a77 R14: 0000000000000046 R15: ffff8880339badf8 [ 71.883848][ T5104] FS: 00007f55c522e6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.886775][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.889118][ T5104] CR2: 00007f55c450b170 CR3: 000000001a946000 CR4: 0000000000352ef0 [ 71.892057][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.894983][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.897853][ T5104] Call Trace: [ 71.899099][ T5104] [ 71.900229][ T5104] ? __die_body+0x5f/0xb0 [ 71.901813][ T5104] ? die_addr+0xb0/0xe0 [ 71.903381][ T5104] ? exc_general_protection+0x3dd/0x5d0 [ 71.905385][ T5104] ? asm_exc_general_protection+0x26/0x30 [ 71.907353][ T5104] ? ata_msense_control+0x862/0x1cf0 [ 71.909197][ T5104] ? ata_msense_control+0x966/0x1cf0 [ 71.910980][ T5104] ? ata_msense_control+0x862/0x1cf0 [ 71.912739][ T5104] ? ata_scsi_simulate+0x15e9/0x2320 [ 71.914425][ T5104] ata_scsi_simulate+0x1ae8/0x2320 [ 71.916295][ T5104] ? __pfx_ata_scsi_simulate+0x10/0x10 [ 71.918430][ T5104] __ata_scsi_queuecmd+0x21e/0x1030 [ 71.920507][ T5104] ata_scsi_queuecmd+0x3bb/0x530 [ 71.922453][ T5104] scsi_queue_rq+0x1d7c/0x2e90 [ 71.924310][ T5104] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 71.926412][ T5104] ? __pfx_lock_release+0x10/0x10 [ 71.928371][ T5104] ? do_raw_spin_lock+0x14f/0x370 [ 71.930379][ T5104] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 71.932742][ T5104] __blk_mq_sched_dispatch_requests+0x424/0x1840 [ 71.935319][ T5104] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 71.937984][ T5104] ? blk_mq_run_hw_queue+0x136/0xae0 [ 71.939835][ T5104] ? __asan_memset+0x23/0x50 [ 71.941462][ T5104] ? __pfx_lock_release+0x10/0x10 [ 71.943332][ T5104] ? blk_mq_insert_request+0x72e/0x810 [ 71.945341][ T5104] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 71.947500][ T5104] ? blk_mq_run_hw_queue+0x40c/0xae0 [ 71.949215][ T5104] blk_mq_run_hw_queue+0x9a5/0xae0 [ 71.951062][ T5104] ? blk_account_io_start+0x128/0x4c0 [ 71.952888][ T5104] blk_execute_rq+0x239/0x4b0 [ 71.954645][ T5104] ? __pfx_blk_execute_rq+0x10/0x10 [ 71.956623][ T5104] ? __pfx_lock_release+0x10/0x10 [ 71.958644][ T5104] ? bpf_lsm_capable+0x9/0x10 [ 71.960578][ T5104] ? security_capable+0x7e/0x2d0 [ 71.962549][ T5104] ? capable+0x89/0xe0 [ 71.964187][ T5104] scsi_ioctl+0x222f/0x2d80 [ 71.965936][ T5104] ? tomoyo_path_number_perm+0x68d/0x880 [ 71.968115][ T5104] ? do_vfs_ioctl+0xf08/0x2e40 [ 71.969983][ T5104] ? __pfx_scsi_ioctl+0x10/0x10 [ 71.971910][ T5104] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.973910][ T5104] ? mark_lock+0x9a/0x360 [ 71.975538][ T5104] ? tomoyo_path_number_perm+0x208/0x880 [ 71.977470][ T5104] ? __pfx_lock_release+0x10/0x10 [ 71.979430][ T5104] ? lockdep_hardirqs_on+0x99/0x150 [ 71.981452][ T5104] ? kfree+0x1a0/0x440 [ 71.983070][ T5104] ? tomoyo_path_number_perm+0x68d/0x880 [ 71.985198][ T5104] ? tomoyo_path_number_perm+0x71a/0x880 [ 71.987272][ T5104] ? tomoyo_path_number_perm+0x208/0x880 [ 71.989438][ T5104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 71.991937][ T5104] sg_ioctl+0x16e9/0x2e80 [ 71.993650][ T5104] ? __pfx_sg_ioctl+0x10/0x10 [ 71.995465][ T5104] ? __fget_files+0x29/0x470 [ 71.997204][ T5104] ? __fget_files+0x3f3/0x470 [ 71.999045][ T5104] ? __pfx_sg_ioctl+0x10/0x10 [ 72.000797][ T5104] __se_sys_ioctl+0xf9/0x170 [ 72.002591][ T5104] do_syscall_64+0xf3/0x230 [ 72.004380][ T5104] ? clear_bhb_loop+0x35/0x90 [ 72.006095][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.008205][ T5104] RIP: 0033:0x7f55c437def9 [ 72.009881][ T5104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.016818][ T5104] RSP: 002b:00007f55c522e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.019941][ T5104] RAX: ffffffffffffffda RBX: 00007f55c4535f80 RCX: 00007f55c437def9 [ 72.022888][ T5104] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000007 [ 72.025930][ T5104] RBP: 00007f55c43f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 72.028973][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.032020][ T5104] R13: 0000000000000000 R14: 00007f55c4535f80 R15: 00007ffe2296b4b8 [ 72.034960][ T5104] [ 72.036154][ T5104] Modules linked in: [ 72.037611][ T5104] ---[ end trace 0000000000000000 ]--- [ 72.039600][ T5104] RIP: 0010:ata_msense_control+0x966/0x1cf0 [ 72.041854][ T5104] Code: b6 04 10 84 c0 0f 85 9b 0f 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 b6 0f 00 00 66 c7 03 00 e4 49 89 ec 49 c1 ec 03 <41> 0f b6 04 14 84 c0 0f 85 cc 0f 00 00 0f b6 5d 00 c0 e3 04 80 e3 [ 72.049241][ T5104] RSP: 0018:ffffc9000b13f068 EFLAGS: 00010046 [ 72.051597][ T5104] RAX: 0000000000000000 RBX: ffffffff9a718a76 RCX: ffffffff864b0862 [ 72.054489][ T5104] RDX: dffffc0000000000 RSI: ffffffff8c921080 RDI: ffffffff9a718a75 [ 72.057418][ T5104] RBP: 0000000000000000 R08: 0000000000020a0a R09: 1e00ffff00000000 [ 72.060481][ T5104] R10: dffffc0000000000 R11: fffffbfff34e314f R12: 0000000000000000 [ 72.063309][ T5104] R13: ffffffff9a718a77 R14: 0000000000000046 R15: ffff8880339badf8 [ 72.065992][ T5104] FS: 00007f55c522e6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 72.069223][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.071654][ T5104] CR2: 00007f55c450b170 CR3: 000000001a946000 CR4: 0000000000352ef0 [ 72.074537][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.077553][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.080342][ T5104] Kernel panic - not syncing: Fatal exception [ 72.082653][ T5104] Kernel Offset: disabled [ 72.084124][ T5104] Rebooting in 86400 seconds..