Extracting prog: 58.002299299s Minimizing prog: 37m42.529546403s Simplifying prog options: 0s Extracting C: 54.523497598s Simplifying C: 5m0.082120193s extracting reproducer from 31 programs testing a last program of every proc single: executing 6 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat-rt_sigprocmask-getpid-gettid-rt_tgsigqueueinfo-signalfd-read detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = getpid() r9 = gettid() rt_tgsigqueueinfo(r8, r9, 0x5, &(0x7f0000000080)={0x0, 0x10, 0x6}) r10 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r10, &(0x7f00000005c0)=""/377, 0x179) program crashed: WARNING in do_clear_cpu_cap single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat-rt_sigprocmask-getpid-gettid-rt_tgsigqueueinfo-signalfd detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = getpid() r9 = gettid() rt_tgsigqueueinfo(r8, r9, 0x5, &(0x7f0000000080)={0x0, 0x10, 0x6}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat-rt_sigprocmask-getpid-gettid-rt_tgsigqueueinfo detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = getpid() r9 = gettid() rt_tgsigqueueinfo(r8, r9, 0x5, &(0x7f0000000080)={0x0, 0x10, 0x6}) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat-rt_sigprocmask-getpid-gettid detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() gettid() program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat-rt_sigprocmask-getpid detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat-rt_sigprocmask detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount-openat detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write-mount detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-pwrite64 detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-write-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) write(r6, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-openat-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-pwrite64-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-openat-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r5, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-mount-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='on\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r5, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mkdirat-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mount-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mkdirat-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdir-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r6, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-ioctl$KVM_CREATE_VM-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='on\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r5, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-ioctl$sock_bt_hci-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r3, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r4, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-bind$bt_hci-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r3, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r4, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-syz_init_net_socket$bt_hci-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='on\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-sendmsg-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000000020000b72d13b2a4a2719302000000030b4b026c26236925000400fea10080bd2dca8a9848a3c728f1c4747b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98f6d5fda542e718f94b929ade276566b794055ad13aa6d71283745c6decf83054e2b296fb143e4ca832fa4247a73fd287010e9a3d4987693b1e5092b620c7a937d88a426b133fde7c1370a8b36f7ab6852e067eb7fd4ffc075bc0e513474fc4302e33618b922312bda8ca477e8443d0a67628de87f6290fa572d3645157072c50a3ad80b30247a2d55b5f9e4cda9e802006", 0xda}], 0x1, 0x0, 0xfffffffffffffecb}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='on\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, 0x0, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180), 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, 0x0, 0x0, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200), 0x0, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, 0x0, 0x0) program did not crash testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program crashed: WARNING in do_clear_cpu_cap simplifying C reproducer testing compiled C program (duration=34.767269205s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program did not crash testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program did not crash testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program did not crash testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program crashed: WARNING in do_clear_cpu_cap testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program crashed: WARNING in do_clear_cpu_cap testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program crashed: WARNING in do_clear_cpu_cap testing compiled C program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write program crashed: WARNING in do_clear_cpu_cap testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap validation run: crashed=true testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap validation run: crashed=true testing program (duration=34.767269205s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-mkdirat-mount-mkdirat-mount-openat-write-openat-openat-write-pwrite64-write detailed listing: executing program 0: socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r2, &(0x7f0000000180)='1\x00', 0x1) program crashed: WARNING in do_clear_cpu_cap validation run: crashed=true reproducing took 46m29.242034517s repro crashed as (corrupted=false): Disabled fast string operations ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7ac0 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7bf8 R08: ffffc900001a7b7f R09: 0000000000000000 R10: ffffc900001a7b20 R11: fffff52000034f70 R12: 0000000000000001 R13: 0000000000000070 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000070 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9e8/0x1020 arch/x86/kernel/cpu/intel.c:336 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7980 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7ab0 R08: ffffc900001a7a3f R09: 0000000000000000 R10: ffffc900001a79e0 R11: fffff52000034f48 R12: 0000000000000001 R13: 0000000000000070 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000070 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: clear_cpu_cap arch/x86/kernel/cpu/cpuid-deps.c:142 [inline] clear_feature arch/x86/kernel/cpu/cpuid-deps.c:97 [inline] do_clear_cpu_cap+0x17a/0x440 arch/x86/kernel/cpu/cpuid-deps.c:119 setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9e8/0x1020 arch/x86/kernel/cpu/intel.c:336 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7ac0 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7bf8 R08: ffffc900001a7b7f R09: 0000000000000000 R10: ffffc900001a7b20 R11: fffff52000034f70 R12: 0000000000000001 R13: 0000000000000129 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000129 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9f2/0x1020 arch/x86/kernel/cpu/intel.c:337 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7980 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7ab0 R08: ffffc900001a7a3f R09: 0000000000000000 R10: ffffc900001a79e0 R11: fffff52000034f48 R12: 0000000000000001 R13: 0000000000000129 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000129 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: clear_cpu_cap arch/x86/kernel/cpu/cpuid-deps.c:142 [inline] clear_feature arch/x86/kernel/cpu/cpuid-deps.c:97 [inline] do_clear_cpu_cap+0x17a/0x440 arch/x86/kernel/cpu/cpuid-deps.c:119 setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9f2/0x1020 arch/x86/kernel/cpu/intel.c:337 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations final repro crashed as (corrupted=false): Disabled fast string operations ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7ac0 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7bf8 R08: ffffc900001a7b7f R09: 0000000000000000 R10: ffffc900001a7b20 R11: fffff52000034f70 R12: 0000000000000001 R13: 0000000000000070 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000070 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9e8/0x1020 arch/x86/kernel/cpu/intel.c:336 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7980 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7ab0 R08: ffffc900001a7a3f R09: 0000000000000000 R10: ffffc900001a79e0 R11: fffff52000034f48 R12: 0000000000000001 R13: 0000000000000070 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000070 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: clear_cpu_cap arch/x86/kernel/cpu/cpuid-deps.c:142 [inline] clear_feature arch/x86/kernel/cpu/cpuid-deps.c:97 [inline] do_clear_cpu_cap+0x17a/0x440 arch/x86/kernel/cpu/cpuid-deps.c:119 setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9e8/0x1020 arch/x86/kernel/cpu/intel.c:336 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7ac0 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7bf8 R08: ffffc900001a7b7f R09: 0000000000000000 R10: ffffc900001a7b20 R11: fffff52000034f70 R12: 0000000000000001 R13: 0000000000000129 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000129 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9f2/0x1020 arch/x86/kernel/cpu/intel.c:337 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/kernel/cpu/cpuid-deps.c:117 do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:do_clear_cpu_cap+0x401/0x440 arch/x86/kernel/cpu/cpuid-deps.c:117 Code: 84 24 e0 00 00 00 75 29 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ce ba 66 04 cc e8 a8 1d 48 00 0f 0b eb 92 e8 9f 1d 48 00 <0f> 0b e9 31 fd ff ff e8 83 59 64 04 48 c7 c1 10 a4 ec 87 80 e1 07 RSP: 0000:ffffc900001a7980 EFLAGS: 00010093 RAX: ffffffff813f5421 RBX: dffffc0000000001 RCX: ffff88810366b900 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001a7ab0 R08: ffffc900001a7a3f R09: 0000000000000000 R10: ffffc900001a79e0 R11: fffff52000034f48 R12: 0000000000000001 R13: 0000000000000129 R14: f8f8f8f8f8f8f8f8 R15: 0000000000000129 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000074aa000 CR4: 00000000003506b0 Call Trace: clear_cpu_cap arch/x86/kernel/cpu/cpuid-deps.c:142 [inline] clear_feature arch/x86/kernel/cpu/cpuid-deps.c:97 [inline] do_clear_cpu_cap+0x17a/0x440 arch/x86/kernel/cpu/cpuid-deps.c:119 setup_clear_cpu_cap+0x19/0x30 arch/x86/kernel/cpu/cpuid-deps.c:147 early_init_intel+0x9f2/0x1020 arch/x86/kernel/cpu/intel.c:337 init_intel+0x2c/0x8a0 arch/x86/kernel/cpu/intel.c:557 identify_cpu+0xd29/0x3660 arch/x86/kernel/cpu/common.c:1931 identify_secondary_cpu+0x16/0x80 arch/x86/kernel/cpu/common.c:2046 smp_store_cpu_info arch/x86/kernel/smpboot.c:333 [inline] ap_starting+0x107/0x1c0 arch/x86/kernel/smpboot.c:192 start_secondary+0x7c/0x140 arch/x86/kernel/smpboot.c:282 common_startup_64+0x13b/0x157 ---[ end trace 0000000000000000 ]--- Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations Disabled fast string operations