Extracting prog: 1h19m17.447084168s
Minimizing prog: 35m6.113981208s
Simplifying prog options: 4m10.845439769s
Extracting C: 1m24.664692425s
Simplifying C: 0s


extracting reproducer from 16 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_TRANSLATE
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-mmap-madvise-openat$zero-read-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-nanosleep
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff)
mount(&(0x7f0000006000)=@filename='sysfs\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r0, &(0x7f0000008000)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r1, &(0x7f000000a000)='1', 0x1)
mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f000000c000), 0x0, 0x0)
read(r2, &(0x7f0000200000), 0x200000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
nanosleep(&(0x7f000000b000)={0x0, 0x5f5e100}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-getpid-openat-write$cgroup_pid-close-openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_RUN-openat-write-close-mmap-madvise
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100)=r0, 0x12)
close(r1)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='4096\x00', 0x4)
close(r7)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 16 programs with base timeout 30s
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 8, 7, 9, 9, 7, 5, 8, 9, 18, 4, 16, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x8000000, 0x200000, &(0x7f0000e00000/0x200000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x8000000, 0x200000, &(0x7f0000e00000/0x200000)=nil})
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000180)="30000000100005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f00000001c0)="30000000110005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000200)="30000000120005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000240)="30000000130005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000280)="30000000140005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000400)="300000001a0005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk', 0x4)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000240)="b81000c0fe8b00f4", 0x8}], 0x1, 0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000000)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x2000}})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000002000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100)=r0, 0x12)
close(r1)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='4096\x00', 0x4)
close(r7)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x40138083, &(0x7f0000000180)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x1000, 0x20, 0x0, 0x0, 0xfee00000})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff)
mount(&(0x7f0000006000)=@filename='sysfs\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r0, &(0x7f0000008000)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r1, &(0x7f000000a000)='1', 0x1)
mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f000000c000), 0x0, 0x0)
read(r2, &(0x7f0000200000), 0x200000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
nanosleep(&(0x7f000000b000)={0x0, 0x5f5e100}, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: posix_spawnp failed
bisect: bisecting 16 programs
bisect: split chunks (needed=false): <16>
bisect: split chunk #0 of len 16 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 7, 5, 8, 9, 18, 4, 16, 7, 6]
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x8000000, 0x200000, &(0x7f0000e00000/0x200000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x8000000, 0x200000, &(0x7f0000e00000/0x200000)=nil})
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000180)="30000000100005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f00000001c0)="30000000110005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000200)="30000000120005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000240)="30000000130005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000280)="30000000140005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
write(r0, &(0x7f0000000400)="300000001a0005000000000000000000010100000a0004007664706130000000100002007664706173696d5f6e657400", 0x30)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk', 0x4)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000240)="b81000c0fe8b00f4", 0x8}], 0x1, 0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000000)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x2000}})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000002000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100)=r0, 0x12)
close(r1)
r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r7, &(0x7f0000000280)='4096\x00', 0x4)
close(r7)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x40138083, &(0x7f0000000180)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x1000, 0x20, 0x0, 0x0, 0xfee00000})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff)
mount(&(0x7f0000006000)=@filename='sysfs\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r0, &(0x7f0000008000)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r1, &(0x7f000000a000)='1', 0x1)
mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f000000c000), 0x0, 0x0)
read(r2, &(0x7f0000200000), 0x200000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
nanosleep(&(0x7f000000b000)={0x0, 0x5f5e100}, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 8, 7, 9, 4, 16, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x40138083, &(0x7f0000000180)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x1000, 0x20, 0x0, 0x0, 0xfee00000})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff)
mount(&(0x7f0000006000)=@filename='sysfs\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r0, &(0x7f0000008000)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r1, &(0x7f000000a000)='1', 0x1)
mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f000000c000), 0x0, 0x0)
read(r2, &(0x7f0000200000), 0x200000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
nanosleep(&(0x7f000000b000)={0x0, 0x5f5e100}, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 8, 7, 9]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))

program did not crash
bisect: split chunks (needed=true): <6>, <4>
bisect: split chunk #0 of len 6 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 7, 9, 4, 16, 7, 6]
detailed listing:
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x40138083, &(0x7f0000000180)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x1000, 0x20, 0x0, 0x0, 0xfee00000})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff)
mount(&(0x7f0000006000)=@filename='sysfs\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r0, &(0x7f0000008000)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r1, &(0x7f000000a000)='1', 0x1)
mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f000000c000), 0x0, 0x0)
read(r2, &(0x7f0000200000), 0x200000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
nanosleep(&(0x7f000000b000)={0x0, 0x5f5e100}, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 4, 16, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x40138083, &(0x7f0000000180)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x1000, 0x20, 0x0, 0x0, 0xfee00000})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./sys\x00', 0x1ff)
mount(&(0x7f0000006000)=@filename='sysfs\x00', &(0x7f0000005000)='./sys\x00', &(0x7f0000006000)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r0, &(0x7f0000008000)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000009000)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r1, &(0x7f000000a000)='1', 0x1)
mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f000000c000), 0x0, 0x0)
read(r2, &(0x7f0000200000), 0x200000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
nanosleep(&(0x7f000000b000)={0x0, 0x5f5e100}, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 8, 7, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <3>, <3>, <2>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8, 7, 9, 7, 6]
detailed listing:
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 7, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='core\x00\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='mem\x00\x00', 0x3)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f000000b000)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f000000c000)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x2}}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000d000)=@vmx={0x0, 0x0, 0x2080})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
bisect: split chunk #1 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: lost connection to test machine
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 9, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 31, 8, 9, 7]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})

program did not crash
bisect: split chunks (needed=true): <2>, <1>, <1>, <1>, <1>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [31, 8, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #3 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #4 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunks (needed=true): <1>, <1, final>, <1, final>, <1, final>, <1, final>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 5 programs left: 

executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})


bisect: trying to concatenate
bisect: concatenate 5 entries
minimizing program #0 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_IRQFD(r12, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r10 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af71, &(0x7f0000000500)={0x0, r10})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r10, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
r9 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r9, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r8, &(0x7f0000000440)='vdpa2\x00', 0x6)
r9 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r9, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r8 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r8, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
write(r7, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r8 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r8, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r7 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r7, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r6, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r7 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r7, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r6 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r6, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r6 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r6, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r5 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r5, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='vdpa0\x00', 0x6)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r5 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r5, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r4, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
write(0xffffffffffffffff, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r4, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/vdpa/devices/vdpa0/driver_override\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r4, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r4, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r4, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r3 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r3, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='vp-vdpa\x00', 0x8)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r3 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r3, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r1, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r1, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 8, 9, 7, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 8, 9, 7, 6]
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
minimized 31 calls -> 16 calls
minimizing program #1 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 7, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 7, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 7, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 6, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x14, {"0f01cf"}}], 0x14})
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 5, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 3, 9, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 0:
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
minimized 8 calls -> 4 calls
minimizing program #2 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 8, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 7, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 7, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 7, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 7, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 7, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r2, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 7, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r2, 0x3, 0x11, r1, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r2, 0x3, 0x11, r1, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 7, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 0:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0x10000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
minimized 9 calls -> 6 calls
minimizing program #3 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 6, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x10000, 0x1000, 0xfffffffffffffffd})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 5, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 4, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 4, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 4, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 2, 6]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 0:
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x1000})

program did not crash
minimized 7 calls -> 3 calls
minimizing program #4 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 5]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee51100"}})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 4]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 3]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 2]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 1]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 4, 6, 3, 0]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
executing program 2:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
executing program 1:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r1, 0x3, 0x11, r0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000000))
executing program 1:
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})
executing program 0:

program crashed: SYZFAIL: posix_spawnp failed
minimized 6 calls -> 0 calls
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-openat$kvm-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_VCPU_EVENTS
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1})

program crashed: SYZFAIL: posix_spawnp failed
bisect: concatenation succeeded
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-openat$kvm-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-openat$kvm
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_RUN
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-mmap$KVM_VCPU-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_IRQFD-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000700)={r2, 0x0, 0x0, 0xffffffff})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-eventfd2-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
eventfd2(0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/vdpa/devices/vdpa2/driver_override\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-write-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='vdpa1\x00', 0x6)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/vdpa/devices/vdpa1/driver_override\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-write-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='vdpa0\x00', 0x6)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-write-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='vhost_vdpa\x00', 0xb)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-nanosleep-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vp-vdpa/bind\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/vdpa/drivers/vhost_vdpa/bind\x00', 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program did not crash
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "0f0b"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4004, 0x0, 0xffffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x0, 0x82}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x10a})

program crashed: SYZFAIL: mkdir(syz-tmp) failed
testing program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=46.270521606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
program did not crash
simplifying guilty program options
testing program (duration=46.270521606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=46.270521606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
program did not crash
testing program (duration=46.270521606s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program did not crash
testing program (duration=46.270521606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program crashed: SYZFAIL: failed to mkdtemp
a never seen crash title: SYZFAIL: failed to mkdtemp, ignore
testing program (duration=46.270521606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
validation run: crashed=true
testing program (duration=46.270521606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
validation run: crashed=true
testing program (duration=46.270521606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-openat$kvm-ioctl$KVM_RUN-syz_kvm_add_vcpu$x86
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
validation run: crashed=true
reproducing took 2h2m22.262536263s
repro crashed as (corrupted=false):
SYZFAIL: mkdir(syz-tmp) failed
 (errno 30: Read-only file system)
loop exited with status 67
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: repeatedly failed to execute the program
proc=0 req=17 state=1 status=67 (errno 9: Bad file descriptor)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF

final repro crashed as (corrupted=false):
SYZFAIL: mkdir(syz-tmp) failed
 (errno 30: Read-only file system)
loop exited with status 67
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: failed to mkdtemp
 (errno 30: Read-only file system)
SYZFAIL: repeatedly failed to execute the program
proc=0 req=17 state=1 status=67 (errno 9: Bad file descriptor)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF