Extracting prog: 5m6.352335026s
Minimizing prog: 1h45m2.146320246s
Simplifying prog options: 1m58.138559971s
Extracting C: 46.549126077s
Simplifying C: 16m24.089150246s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
single: successfully extracted reproducer
found reproducer with 15 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-openat$kvm-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x6})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-mremap-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-ioctl$VIDIOC_S_CTRL-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-syz_open_dev$video4linux-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getsockopt$sock_cred-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: WARNING in kvm_check_and_inject_events
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: WARNING in kvm_check_and_inject_events
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: WARNING in kvm_check_and_inject_events
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: WARNING in kvm_check_and_inject_events
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: WARNING in kvm_check_and_inject_events
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
program crashed: WARNING in kvm_check_and_inject_events
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_PIT2-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_PIT2-ioctl$KVM_SET_IRQCHIP-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-timer_delete
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x81, 0x4b, 0xf, 0x4, 0x3, 0x1b, 0x7}, {0x2, 0x6, 0x0, 0x2, 0x0, 0x12, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0xa6, 0x401}, {0x4, 0x15, 0x40, 0x1, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x2f, 0x1, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x6, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
timer_delete(0x0)

program crashed: WARNING in kvm_check_and_inject_events
validation run: crashed=true
reproducing took 2h16m2.569703786s
repro crashed as (corrupted=false):
------------[ cut here ]------------
irq == -1
WARNING: arch/x86/kvm/x86.c:10800 at kvm_check_and_inject_events+0xf1e/0x1070 arch/x86/kvm/x86.c:10800, CPU#0: syz.2.478/7431
Modules linked in:
CPU: 0 UID: 0 PID: 7431 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:kvm_check_and_inject_events+0xf1e/0x1070 arch/x86/kvm/x86.c:10800
Code: 00 48 8b 44 24 20 48 0d 00 01 01 00 48 89 44 24 10 e9 35 fd ff ff e8 51 44 7e 00 90 0f 0b 90 e9 b7 fe ff ff e8 43 44 7e 00 90 <0f> 0b 90 e9 2e f8 ff ff e8 d5 bd ee 00 e9 ae f6 ff ff 48 8b 7c 24
RSP: 0018:ffffc90003e77a20 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880564729c0 RCX: ffffffff818b8adc
RDX: ffff888027f40000 RSI: ffffffff818b8bfd RDI: ffff888027f40000
RBP: 00000000ffffffff R08: 0000000000000005 R09: 00000000ffffffff
R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8880564735ec
R13: 0000000000000001 R14: ffff888056472ca8 R15: ffff8880564732f8
FS:  000055558b257500(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb475a73780 CR3: 0000000034df7000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 vcpu_enter_guest arch/x86/kvm/x86.c:11296 [inline]
 vcpu_run+0xf1d/0x5d50 arch/x86/kvm/x86.c:11707
 kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 arch/x86/kvm/x86.c:12062
 kvm_vcpu_ioctl+0x730/0x1700 virt/kvm/kvm_main.c:4470
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb475b9de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc07cddbe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fb475e25fa0 RCX: 00007fb475b9de59
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007fb475c33e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb475e25fac R14: 00007fb475e25fa0 R15: 00007fb475e25fa0
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
irq == -1
WARNING: arch/x86/kvm/x86.c:10800 at kvm_check_and_inject_events+0xf1e/0x1070 arch/x86/kvm/x86.c:10800, CPU#0: syz.2.478/7431
Modules linked in:
CPU: 0 UID: 0 PID: 7431 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:kvm_check_and_inject_events+0xf1e/0x1070 arch/x86/kvm/x86.c:10800
Code: 00 48 8b 44 24 20 48 0d 00 01 01 00 48 89 44 24 10 e9 35 fd ff ff e8 51 44 7e 00 90 0f 0b 90 e9 b7 fe ff ff e8 43 44 7e 00 90 <0f> 0b 90 e9 2e f8 ff ff e8 d5 bd ee 00 e9 ae f6 ff ff 48 8b 7c 24
RSP: 0018:ffffc90003e77a20 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff8880564729c0 RCX: ffffffff818b8adc
RDX: ffff888027f40000 RSI: ffffffff818b8bfd RDI: ffff888027f40000
RBP: 00000000ffffffff R08: 0000000000000005 R09: 00000000ffffffff
R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8880564735ec
R13: 0000000000000001 R14: ffff888056472ca8 R15: ffff8880564732f8
FS:  000055558b257500(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb475a73780 CR3: 0000000034df7000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 vcpu_enter_guest arch/x86/kvm/x86.c:11296 [inline]
 vcpu_run+0xf1d/0x5d50 arch/x86/kvm/x86.c:11707
 kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 arch/x86/kvm/x86.c:12062
 kvm_vcpu_ioctl+0x730/0x1700 virt/kvm/kvm_main.c:4470
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb475b9de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc07cddbe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fb475e25fa0 RCX: 00007fb475b9de59
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007fb475c33e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb475e25fac R14: 00007fb475e25fa0 R15: 00007fb475e25fa0
 </TASK>