Extracting prog: 1h52m41.056851751s
Minimizing prog: 1h32m0.183568777s
Simplifying prog options: 0s
Extracting C: 6m23.451427588s
Simplifying C: 43m56.301258382s


extracting reproducer from 47 programs
testing a last program of every proc
single: executing 18 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-eventfd2-write-write-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b81003e0fec70078563412f4", 0xc}], 0x1, 0x0, &(0x7f0000000100), 0x0)
r3 = eventfd2(0x0, 0x0)
write(r3, &(0x7f000000a018)="07c0000000000000", 0x8)
write(r3, &(0x7f000000cfb8)="8700e0fe00000000", 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-syz_clone-syz_clone-syz_clone-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_RUN-ioctl$KVM_RUN-ioctl$KVM_PRE_FAULT_MEMORY-ioctl$KVM_PRE_FAULT_MEMORY-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)}], 0x41, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x1000})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-writev
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-writev
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-ioctl$KVM_SET_NESTED_STATE
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='disk\n\x00', 0x6)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\x00\x00\x00\x00', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-ioctl$KVM_SET_NESTED_STATE
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)

program did not crash
single: failed to extract reproducer
bisect: bisecting 47 programs with base timeout 30s
testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 5, 25, 7, 4, 7, 8, 6, 10, 4, 4, 10, 6, 6, 7, 6, 38, 5, 6, 7, 6, 6, 6, 6, 16, 9, 9, 18, 10, 9, 10, 12, 3, 8, 9, 7, 31, 10, 7, 6, 5, 10, 7, 4, 6, 13, 9]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='vfio-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/mem_sleep\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='mem\n', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='auto\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/vfio\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/iommu\x00', 0x2, 0x0)
fcntl$dupfd(r5, 0x0, 0x65)
ioctl(r4, 0x3b76, &(0x7f00000004c0)="18000000000000006500"/24)
r6 = eventfd(0x0)
fcntl$dupfd(r6, 0x0, 0x64)
ioctl(r4, 0x3b6e, &(0x7f0000000500)="180000002400000000000000000000000100000064000000")
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000580)={0x64, 0x0, 0x0, 0x0})
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0faa"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4013ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1})
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x41000, 0xeeef0000, {}, 0x0, 0x5}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000000)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x1000}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x1000, 0x1000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x1000, 0x1000, 0x8})
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\x00\x00\x00\x00', 0x4)
executing program 33:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='disk\n\x00', 0x6)
executing program 34:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 35:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)
executing program 4:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})
executing program 6:
r0 = socket(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000010000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000011000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000012000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000013000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000014000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000015000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000016000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000017000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000018000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000019000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001a000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001b000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001d000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001e000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001f000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000020000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000021000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000022000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000023000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000024000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000025000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000026000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000027000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000028000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000029000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002a000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002b000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002c000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002d000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002e000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002f000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000030000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freeze', 0x6) (async)
nanosleep(&(0x7f0000000000)={0x0, 0x100000}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)
executing program 36:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 37:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)
executing program 38:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)
executing program 39:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002100))
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000004180)={0x0, 0x1000})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x1d, {"b81003e0fec70078563412f4"}}], 0x1d})
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
executing program 9:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}], 0x18})
write(0x1, &(0x7f0000c04028)="01000000000000000040000000000000", 0x10)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x80000020}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000002280)={0xa3, 0x0, &(0x7f0000000100)})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000200)=@vmx={0x5, 0x0, 0x1080, {0x1000, 0x2000}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x4020ae46, &(0x7f0000000000)="00000000000000000000000000000000002000000000000000000100007f0000")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240)
ioctl(r2, 0x4048aecb, &(0x7f0000600000)="0000000000000000001000"/72)
ioctl(r2, 0x4138ae84, &(0x7f0000000000)='\x00'/312)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000600100)="070000000000000001000000ffffffff0100"/72)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='auto\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/1\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/vfio/2\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vfio/3\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/vfio/4\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vfio/5\x00', 0x2, 0x0)
executing program 9:
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068ae81, &(0x7f0000000000)={0x79, 0x0, 0x18})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x12, {"f4"}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068ae81, &(0x7f0000000040))
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0x1}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="a10000e0fef4", 0x6}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 8:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl(r1, 0x4038ae7a, &(0x7f0000000000)='\"\x00'/56)
ioctl(r1, 0x4048aec9, &(0x7f0000000000)="06000000000000000000002000"/72)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x46, {"48c7c01d00000048c7c70300000048c7c6190005000f01c1c331000500000000000100"/53}}], 0x46})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 9:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@code={0xa, 0x34, {"48c70425280001000100000048c704253000010000100100c7042500100100d07ee511"}}, @uexit={0x0, 0x18}], 0x4c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x5, 0x2, 0x31237648, 0x2, 0x1, 0x80}, {0x1, 0x2, 0x2, 0x7, 0x4, 0x7fffffff, 0x4e38}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000280)})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000073, 0x0, 0x10001}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x12000, 0xffffffffffffffff}, {"d07ee51100"}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xf4240)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x3})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x8000000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x60})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000240)={0x2710, 0x40, 0x0, &(0x7f0000001000)})
executing program 9:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="f365670fafebc744240200050000c7442406000000000f0114240fa02cd8d8200000000f22d866ed64360f0866b85e000f1ad067737c8fc978c3729e0ffe0c96c7442402c8000000c7442406000000000f0114240f20d60f641f", 0x5a}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x3000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0x0, 0x0, r2})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r3, r4)
sendto(r4, &(0x7f0000000000)="3000000014000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000040)="3000000015000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000080)="3000000016000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000000c0)="3000000017000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000100)="3000000018000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000140)="3000000019000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000180)="300000001a000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000001c0)="300000001b000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000200)="300000001c000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000240)="300000001d000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000280)="300000001e000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000002c0)="300000001f000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000300)="3000000020000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000340)="3000000021000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000380)="3000000022000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000003c0)="3000000023000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./vhost-vdpa-0\x00', 0x81b6, 0xe600)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./vhost-vdpa-0\x00', 0x2, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
dup2(r5, r6)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000400)={0x0, r2})
executing program 8:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x0, 0x80}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0xface}], 0xcb})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xfee00000}}]})
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2})
write(r2, &(0x7f0000000200)="0100000000000000", 0x8)
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64], 0x1, 0x47, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0xa, 0x0, 0x2080, {0x9000, 0xdddd0000, {}, 0x0, 0xbd}, {"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"}})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0xa, 0x0, 0x2080, {0x9000, 0xdddd0000, {}, 0x0, 0xbd}, {"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"}})
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x80})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000, &(0x7f0000001000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="0f01d9", 0x3}], 0x1, 0x1, &(0x7f0000000800)=[@efer={0x2, 0x1500}], 0x1)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000500)=@svm={0x0, 0x1, 0x1080, {0x1000}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000600)={0x0, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x20, {0x0, "c6050000000001f4"}}, @code={0xa, 0x1f, {"48c7c000404000488120fdffffff"}}, @nested_vmlaunch={0x12f, 0x18}], 0x87})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)}], 0x41, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x1000})
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500))
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b81003e0fec70078563412f4", 0xc}], 0x1, 0x0, &(0x7f0000000100), 0x0)
r3 = eventfd2(0x0, 0x0)
write(r3, &(0x7f000000a018)="07c0000000000000", 0x8)
write(r3, &(0x7f000000cfb8)="8700e0fe00000000", 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 18 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-eventfd2-write-write-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b81003e0fec70078563412f4", 0xc}], 0x1, 0x0, &(0x7f0000000100), 0x0)
r3 = eventfd2(0x0, 0x0)
write(r3, &(0x7f000000a018)="07c0000000000000", 0x8)
write(r3, &(0x7f000000cfb8)="8700e0fe00000000", 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-syz_clone-syz_clone-syz_clone-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_RUN-ioctl$KVM_RUN-ioctl$KVM_PRE_FAULT_MEMORY-ioctl$KVM_PRE_FAULT_MEMORY-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500))

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)}], 0x41, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x1000})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-writev
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat$kvm-ioctl$KVM_CREATE_VM-openat-writev
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-ioctl$KVM_SET_NESTED_STATE
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='disk\n\x00', 0x6)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\x00\x00\x00\x00', 0x4)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-syz_kvm_setup_syzos_vm$x86-syz_kvm_add_vcpu$x86-ioctl$KVM_GET_VCPU_MMAP_SIZE-mmap$KVM_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_RUN-ioctl$KVM_GET_NESTED_STATE-ioctl$KVM_SET_NESTED_STATE
detailed listing:
executing program 0:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-write
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)

program did not crash
single: failed to extract reproducer
bisect: bisecting 47 programs with base timeout 1m40s
testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 5, 25, 7, 4, 7, 8, 6, 10, 4, 4, 10, 6, 6, 7, 6, 38, 5, 6, 7, 6, 6, 6, 6, 16, 9, 9, 18, 10, 9, 10, 12, 3, 8, 9, 7, 31, 10, 7, 6, 5, 10, 7, 4, 6, 13, 9]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='vfio-pci\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/vfio/devices/vfio0\x00', 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/mem_sleep\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='mem\n', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='auto\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/vfio\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/iommu\x00', 0x2, 0x0)
fcntl$dupfd(r5, 0x0, 0x65)
ioctl(r4, 0x3b76, &(0x7f00000004c0)="18000000000000006500"/24)
r6 = eventfd(0x0)
fcntl$dupfd(r6, 0x0, 0x64)
ioctl(r4, 0x3b6e, &(0x7f0000000500)="180000002400000000000000000000000100000064000000")
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000580)={0x64, 0x0, 0x0, 0x0})
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x13, {"0faa"}}], 0x13})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4013ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1})
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x41000, 0xeeef0000, {}, 0x0, 0x5}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000000)=@vmx={0x1, 0x0, 0x2080, {0x1000, 0x1000}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x1000, 0x1000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x1000, 0x1000, 0x8})
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)
executing program 2:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 32:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\x00\x00\x00\x00', 0x4)
executing program 33:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='./none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000300)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='disk\n\x00', 0x6)
executing program 34:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x24, {0x0, "48b800000000010000008b00"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 35:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='disk', 0x4)
executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)
executing program 4:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})
executing program 6:
r0 = socket(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000010000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000011000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000012000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000013000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000014000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000015000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000016000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000017000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000018000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000019000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001a000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001b000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001d000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001e000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001f000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000020000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000021000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000022000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000023000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000024000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000025000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000026000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000027000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000028000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000029000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002a000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002b000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002c000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002d000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002e000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000002f000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3000000030000500010000000000000011010000100021007664706173696d5f6e6574000a0024007664706130000000", 0x30}], 0x1}, 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/vhost-vdpa-0\x00', 0x2, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='freeze', 0x6) (async)
nanosleep(&(0x7f0000000000)={0x0, 0x100000}, 0x0)
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)
executing program 36:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001000)=@svm={0x1, 0x1, 0x1080, {0x1000}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 37:
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='disk', 0x4}], 0x1)
executing program 38:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='disk\x00', 0x4)
executing program 39:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}], 0x18})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0xffffffffffffffff, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x1000})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002100))
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000004180)={0x0, 0x1000})
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5)
r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x1d, {"b81003e0fec70078563412f4"}}], 0x1d})
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r10, 0x3, 0x11, r9, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
executing program 9:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}], 0x18})
write(0x1, &(0x7f0000c04028)="01000000000000000040000000000000", 0x10)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x80000020}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000002280)={0xa3, 0x0, &(0x7f0000000100)})
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000200)=@vmx={0x5, 0x0, 0x1080, {0x1000, 0x2000}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x4020ae46, &(0x7f0000000000)="00000000000000000000000000000000002000000000000000000100007f0000")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240)
ioctl(r2, 0x4048aecb, &(0x7f0000600000)="0000000000000000001000"/72)
ioctl(r2, 0x4138ae84, &(0x7f0000000000)='\x00'/312)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000600100)="070000000000000001000000ffffffff0100"/72)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='auto\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/1\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/vfio/2\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/vfio/3\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/vfio/4\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vfio/5\x00', 0x2, 0x0)
executing program 9:
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068ae81, &(0x7f0000000000)={0x79, 0x0, 0x18})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x12, {"f4"}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068ae81, &(0x7f0000000040))
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0x1}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="a10000e0fef4", 0x6}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
executing program 8:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl(r1, 0x4038ae7a, &(0x7f0000000000)='\"\x00'/56)
ioctl(r1, 0x4048aec9, &(0x7f0000000000)="06000000000000000000002000"/72)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x46, {"48c7c01d00000048c7c70300000048c7c6190005000f01c1c331000500000000000100"/53}}], 0x46})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 9:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@code={0xa, 0x34, {"48c70425280001000100000048c704253000010000100100c7042500100100d07ee511"}}, @uexit={0x0, 0x18}], 0x4c})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x5, 0x2, 0x31237648, 0x2, 0x1, 0x80}, {0x1, 0x2, 0x2, 0x7, 0x4, 0x7fffffff, 0x4e38}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000280)})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000073, 0x0, 0x10001}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x4, 0x0, 0x2080, {0x12000, 0xffffffffffffffff}, {"d07ee51100"}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0)
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xf4240)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x3})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x8000000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x60})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000240)={0x2710, 0x40, 0x0, &(0x7f0000001000)})
executing program 9:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="f365670fafebc744240200050000c7442406000000000f0114240fa02cd8d8200000000f22d866ed64360f0866b85e000f1ad067737c8fc978c3729e0ffe0c96c7442402c8000000c7442406000000000f0114240f20d60f641f", 0x5a}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x3000, 0x1000})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0x0, 0x0, r2})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r3, r4)
sendto(r4, &(0x7f0000000000)="3000000014000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000040)="3000000015000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000080)="3000000016000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000000c0)="3000000017000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000100)="3000000018000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000140)="3000000019000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000180)="300000001a000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000001c0)="300000001b000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000200)="300000001c000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000240)="300000001d000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000280)="300000001e000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000002c0)="300000001f000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000300)="3000000020000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000340)="3000000021000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f0000000380)="3000000022000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
sendto(r4, &(0x7f00000003c0)="3000000023000500000000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./vhost-vdpa-0\x00', 0x81b6, 0xe600)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./vhost-vdpa-0\x00', 0x2, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
dup2(r5, r6)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000400)={0x0, r2})
executing program 8:
r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000020c0)={0x0, &(0x7f0000002100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x0, 0x80}}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0xface}], 0xcb})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000000))
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000000))
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xfee00000}}]})
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2})
write(r2, &(0x7f0000000200)="0100000000000000", 0x8)
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64], 0x1, 0x47, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0xa, 0x0, 0x2080, {0x9000, 0xdddd0000, {}, 0x0, 0xbd}, {"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"}})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0xa, 0x0, 0x2080, {0x9000, 0xdddd0000, {}, 0x0, 0xbd}, {"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"}})
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x80})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000, &(0x7f0000001000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000400)="0f01d9", 0x3}], 0x1, 0x1, &(0x7f0000000800)=[@efer={0x2, 0x1500}], 0x1)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000500)=@svm={0x0, 0x1, 0x1080, {0x1000}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000600)={0x0, 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700))
executing program 0:
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x20, {0x0, "c6050000000001f4"}}, @code={0xa, 0x1f, {"48c7c000404000488120fdffffff"}}, @nested_vmlaunch={0x12f, 0x18}], 0x87})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 9:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)}], 0x41, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x1000})
executing program 8:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500))
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b81003e0fec70078563412f4", 0xc}], 0x1, 0x0, &(0x7f0000000100), 0x0)
r3 = eventfd2(0x0, 0x0)
write(r3, &(0x7f000000a018)="07c0000000000000", 0x8)
write(r3, &(0x7f000000cfb8)="8700e0fe00000000", 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 18 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-eventfd2-write-write-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b81003e0fec70078563412f4", 0xc}], 0x1, 0x0, &(0x7f0000000100), 0x0)
r3 = eventfd2(0x0, 0x0)
write(r3, &(0x7f000000a018)="07c0000000000000", 0x8)
write(r3, &(0x7f000000cfb8)="8700e0fe00000000", 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_CREATE_VCPU-syz_clone-syz_clone-syz_clone-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_RUN-ioctl$KVM_RUN-ioctl$KVM_PRE_FAULT_MEMORY-ioctl$KVM_PRE_FAULT_MEMORY-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc020aed5, &(0x7f0000000400)={0x0, 0x100000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500))

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_SET_NESTED_STATE-ioctl$KVM_PRE_FAULT_MEMORY
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)}], 0x41, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003340)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xffffffffffffffff}})
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x1000})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program crashed: no output from test machine
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

program did not crash
testing program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=8m23.013428148s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
simplifying C reproducer
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing compiled C program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: no output from test machine
testing program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program crashed: no output from test machine
validation run: crashed=true
testing program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program crashed: no output from test machine
validation run: crashed=true
testing program (duration=8m23.013428148s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='freeze', 0x6)

program crashed: no output from test machine
validation run: crashed=true
reproducing took 4h38m51.778275558s
repro crashed as (corrupted=false):

final repro crashed as (corrupted=false):