Extracting prog: 29.120988258s Minimizing prog: 12m22.180138251s Simplifying prog options: 0s Extracting C: 25.683005483s Simplifying C: 3m41.902634512s extracting reproducer from 45 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached single: successfully extracted reproducer found reproducer with 13 syscalls minimizing guilty program testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r3, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r3, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-openat$kvm-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r1, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-bind$inet6-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast1, 0xb}, 0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-accept$inet6-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"09d4406ac4b71d25bde77e5bb30230a5c02dea8620c5c5eed5f428d0ff1bc6c5b092a27dd42b562cabbb3fdab107655f49e86559d338a0f06791feeee17663df929d4bad79dcdb33b7c70d363b0dfbd11c08006f37b7f746c81ef0d1fe8886e5d7141fa5e559fc543100ec5b6653de3a3277fc464dec5e74f6a400d6a85a80e63722ecc38d606edf5ad3ea03716f4fb797f40bdf9a06b040600f9f6b772d394b1c3887778711fe37e1f5109f4f18ae3e91c2ac1ffc6f6a321e30367760fdc190d66f3a530df1e91802beb743042f4f19c4bd6fc77627ed9ef6a707f9cc0be7490348510c876675d2412475338227f14d4dc906ab7c0305f1d05df0536bc2771c19aad5e88d545f2fb00386c38a1fe028737c28221c0d68a62d2cdba09a1c06cb70eecd472a9533401a4c25cbfba2769e2c710fdba8db1a7dd2efc4f020f89c40810f59f288ca586873ebad1dacdad562d23f85cc550563452a7098997f89030780c17c2b6dc6125ed0bd33132a2c5ba49a609a6f25f48d9352356d232d384006a39e0cbd9ba53a2f6cfa7a5d8779cab269118730f1b34000905ec393e9b8e3a7abcd30c3c5e85d7ac55de6e6b9f96c4ddc90f4d6b9f14517872b2d44678e0ddac10837d74240719174fbb8414239e18b548bd4d3c66aacf80db6db973a4b4e50e1c0f0c27df4144b279bc37a3aa2d3e47bde06d058b695ac9536a10ed663d35191558f5681acfc936a6aa421f44f6afed415b991fed99072400d89c0e774b6eab379844cc588e6f62591aa009a6d1d2ae7dc682c15bf83f349a6dd27b241b76cd2cc242f67f3ea6dcbb50fc49b6a08686563d45ca830c937e736a1afea9c7dde3612a94a83732b212ca8cb4c9bb02fc4356a489cf133b5e853f88e332ff1f20b373cde6f9a7b21384e920f1f2a92988aef09f7dff63c95a2c06ae95bd4eb595d4fb4bf000dcde7f8c89e95ffa0e589ffafab3c677bbc2e2699b62ee56e40de4362fc35d930b64676177487939845c84052bd4f85c4a1b4683575d2619bc32019ae404f6233344906ccf7ba4d068a03e544eda08bc92e35755ac6063aa773edef1d03568de156ed77a2a5d5f12684a265143e748cc6ebde1bc3a1e2051fb6df406d0f68c783e7f29331f8518df0378e7aa82241fa74b327dd9e2c8a770c82b6217238e8ef928b91c518bed95f4ea48e0535d977a0326ce4bacbbc087a87138722133a4b62b0075f793b6df92bcfcac5f15a5f34c657ec1a584e07496568a27c9fb202b273322473cf3479c489d5a6901f7d4718864bb5f9f42813823017c7d3199a48fb80aa4fa5088e6e889635a94d2b9cd58115067013126861371589a4ec0ac12cd6aa2e8e1bffe4cdca5912c9e579a4fd6b5bcebd4999ab8597b4cbd94c6cde5e7beb2affd02162b0d259db6675892a357141157435da65908aa405e931ae"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash testing program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=30.373026898s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached simplifying C reproducer testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing compiled C program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN program crashed: WARNING in kvm_read_guest_offset_cached testing program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached validation run: crashed=true testing program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached validation run: crashed=true testing program (duration=30.373026898s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_LAPIC-syz_kvm_setup_cpu$x86-madvise-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001240)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000448000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x2, &(0x7f0000000500)=[@flags={0x3, 0x255204}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) ioctl$KVM_RUN(r2, 0xae80, 0x0) program crashed: WARNING in kvm_read_guest_offset_cached validation run: crashed=true reproducing took 18m45.952364854s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6107 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:3459 kvm_read_guest_offset_cached+0x3f5/0x4b0 virt/kvm/kvm_main.c:3459 Modules linked in: CPU: 0 UID: 0 PID: 6107 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:kvm_read_guest_offset_cached+0x3f5/0x4b0 virt/kvm/kvm_main.c:3459 Code: 0f 01 e8 3e 6c 61 00 e9 9b fc ff ff e8 14 25 85 00 48 8b 3c 24 31 d2 48 89 ee e8 16 bf fa 00 e9 2e fe ff ff e8 fc 24 85 00 90 <0f> 0b 90 bb ea ff ff ff e9 4d fe ff ff e8 e9 24 85 00 48 8b 74 24 RSP: 0018:ffffc9000349f960 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888050329898 RCX: ffffffff8136ca66 RDX: ffff88803cfa8000 RSI: ffffffff8136cd84 RDI: 0000000000000006 RBP: 0000000000000004 R08: 0000000000000006 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 R13: ffffc90003921000 R14: 0000000000000000 R15: ffffc900039215a0 FS: 000055558378f500(0000) GS:ffff8880d6713000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000025de6000 CR4: 0000000000352ef0 Call Trace: apf_pageready_slot_free arch/x86/kvm/x86.c:13452 [inline] kvm_arch_can_dequeue_async_page_present+0x172/0x310 arch/x86/kvm/x86.c:13571 kvm_check_async_pf_completion+0x61/0x440 virt/kvm/async_pf.c:158 vcpu_enter_guest arch/x86/kvm/x86.c:10930 [inline] vcpu_run+0x48c2/0x5500 arch/x86/kvm/x86.c:11335 kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 arch/x86/kvm/x86.c:11658 kvm_vcpu_ioctl+0x5eb/0x1690 virt/kvm/kvm_main.c:4464 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdb7658e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd25fe7d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fdb767b5fa0 RCX: 00007fdb7658e929 RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 RBP: 00007fdb76610b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fdb767b5fa0 R14: 00007fdb767b5fa0 R15: 0000000000000003 final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6107 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:3459 kvm_read_guest_offset_cached+0x3f5/0x4b0 virt/kvm/kvm_main.c:3459 Modules linked in: CPU: 0 UID: 0 PID: 6107 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:kvm_read_guest_offset_cached+0x3f5/0x4b0 virt/kvm/kvm_main.c:3459 Code: 0f 01 e8 3e 6c 61 00 e9 9b fc ff ff e8 14 25 85 00 48 8b 3c 24 31 d2 48 89 ee e8 16 bf fa 00 e9 2e fe ff ff e8 fc 24 85 00 90 <0f> 0b 90 bb ea ff ff ff e9 4d fe ff ff e8 e9 24 85 00 48 8b 74 24 RSP: 0018:ffffc9000349f960 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888050329898 RCX: ffffffff8136ca66 RDX: ffff88803cfa8000 RSI: ffffffff8136cd84 RDI: 0000000000000006 RBP: 0000000000000004 R08: 0000000000000006 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 R13: ffffc90003921000 R14: 0000000000000000 R15: ffffc900039215a0 FS: 000055558378f500(0000) GS:ffff8880d6713000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000025de6000 CR4: 0000000000352ef0 Call Trace: apf_pageready_slot_free arch/x86/kvm/x86.c:13452 [inline] kvm_arch_can_dequeue_async_page_present+0x172/0x310 arch/x86/kvm/x86.c:13571 kvm_check_async_pf_completion+0x61/0x440 virt/kvm/async_pf.c:158 vcpu_enter_guest arch/x86/kvm/x86.c:10930 [inline] vcpu_run+0x48c2/0x5500 arch/x86/kvm/x86.c:11335 kvm_arch_vcpu_ioctl_run+0x51e/0x18c0 arch/x86/kvm/x86.c:11658 kvm_vcpu_ioctl+0x5eb/0x1690 virt/kvm/kvm_main.c:4464 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl fs/ioctl.c:893 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdb7658e929 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd25fe7d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fdb767b5fa0 RCX: 00007fdb7658e929 RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 RBP: 00007fdb76610b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fdb767b5fa0 R14: 00007fdb767b5fa0 R15: 0000000000000003