Extracting prog: 2m24.16825619s
Minimizing prog: 22m28.859847843s
Simplifying prog options: 0s
Extracting C: 57.890331808s
Simplifying C: 10m7.509732088s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: WARNING in kvm_read_guest_offset_cached
single: successfully extracted reproducer
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=47.179086846s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
simplifying C reproducer
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing compiled C program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
program crashed: WARNING in kvm_read_guest_offset_cached
testing program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: WARNING in kvm_read_guest_offset_cached
validation run: crashed=true
testing program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: WARNING in kvm_read_guest_offset_cached
validation run: crashed=true
testing program (duration=47.179086846s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program crashed: WARNING in kvm_read_guest_offset_cached
validation run: crashed=true
reproducing took 41m14.042239543s
repro crashed as (corrupted=false):
kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2249738109 (287966477952 ns) > initial count (248453880064 ns). Using initial count to start timer.
------------[ cut here ]------------
WARNING: arch/x86/kvm/../../../virt/kvm/kvm_main.c:3461 at kvm_read_guest_offset_cached+0x3e0/0x460 virt/kvm/kvm_main.c:3461, CPU#1: syz.0.16/6006
Modules linked in:
CPU: 1 UID: 0 PID: 6006 Comm: syz.0.16 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:kvm_read_guest_offset_cached+0x3e0/0x460 virt/kvm/kvm_main.c:3461
Code: c6 05 af ac 8f 0e 01 48 c7 c7 8e 7c c5 8d be 25 04 00 00 48 c7 c2 80 ad a1 8b e8 7b b6 5f 00 e9 c8 fc ff ff e8 71 ed 81 00 90 <0f> 0b 90 b8 ea ff ff ff e9 6b ff ff ff 48 8b 5c 24 10 48 03 1c 24
RSP: 0018:ffffc90003937488 EFLAGS: 00010293
RAX: ffffffff813e23ef RBX: 0000000000000008 RCX: ffff88807c450000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
RBP: 0000000000000000 R08: ffff88807aef57d3 R09: 1ffff1100f5deafa
R10: dffffc0000000000 R11: ffffed100f5deafb R12: ffff8880780d1898
R13: ffff88807aef45a0 R14: ffff88807aef4000 R15: 0000000000000004
FS:  0000555586bee500(0000) GS:ffff8881258a1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000077d20000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 apf_pageready_slot_free arch/x86/kvm/x86.c:13353 [inline]
 kvm_arch_can_dequeue_async_page_present+0x141/0x2f0 arch/x86/kvm/x86.c:13472
 kvm_check_async_pf_completion+0x102/0x3c0 virt/kvm/async_pf.c:158
 vcpu_enter_guest arch/x86/kvm/x86.c:10794 [inline]
 vcpu_run+0x2663/0x6fa0 arch/x86/kvm/x86.c:11219
 kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 arch/x86/kvm/x86.c:11564
 kvm_vcpu_ioctl+0x95c/0xe90 virt/kvm/kvm_main.c:4466
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe737f8e929
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd5b6e3e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe7381b5fa0 RCX: 00007fe737f8e929
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007fe738010ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe7381b5fa0 R14: 00007fe7381b5fa0 R15: 0000000000000003
 </TASK>

final repro crashed as (corrupted=false):
kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2249738109 (287966477952 ns) > initial count (248453880064 ns). Using initial count to start timer.
------------[ cut here ]------------
WARNING: arch/x86/kvm/../../../virt/kvm/kvm_main.c:3461 at kvm_read_guest_offset_cached+0x3e0/0x460 virt/kvm/kvm_main.c:3461, CPU#1: syz.0.16/6006
Modules linked in:
CPU: 1 UID: 0 PID: 6006 Comm: syz.0.16 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:kvm_read_guest_offset_cached+0x3e0/0x460 virt/kvm/kvm_main.c:3461
Code: c6 05 af ac 8f 0e 01 48 c7 c7 8e 7c c5 8d be 25 04 00 00 48 c7 c2 80 ad a1 8b e8 7b b6 5f 00 e9 c8 fc ff ff e8 71 ed 81 00 90 <0f> 0b 90 b8 ea ff ff ff e9 6b ff ff ff 48 8b 5c 24 10 48 03 1c 24
RSP: 0018:ffffc90003937488 EFLAGS: 00010293
RAX: ffffffff813e23ef RBX: 0000000000000008 RCX: ffff88807c450000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
RBP: 0000000000000000 R08: ffff88807aef57d3 R09: 1ffff1100f5deafa
R10: dffffc0000000000 R11: ffffed100f5deafb R12: ffff8880780d1898
R13: ffff88807aef45a0 R14: ffff88807aef4000 R15: 0000000000000004
FS:  0000555586bee500(0000) GS:ffff8881258a1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000077d20000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 apf_pageready_slot_free arch/x86/kvm/x86.c:13353 [inline]
 kvm_arch_can_dequeue_async_page_present+0x141/0x2f0 arch/x86/kvm/x86.c:13472
 kvm_check_async_pf_completion+0x102/0x3c0 virt/kvm/async_pf.c:158
 vcpu_enter_guest arch/x86/kvm/x86.c:10794 [inline]
 vcpu_run+0x2663/0x6fa0 arch/x86/kvm/x86.c:11219
 kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 arch/x86/kvm/x86.c:11564
 kvm_vcpu_ioctl+0x95c/0xe90 virt/kvm/kvm_main.c:4466
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe737f8e929
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd5b6e3e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe7381b5fa0 RCX: 00007fe737f8e929
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007fe738010ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe7381b5fa0 R14: 00007fe7381b5fa0 R15: 0000000000000003
 </TASK>