last executing test programs:

9m49.255582545s ago: executing program 1 (id=827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000093, 0x0, 0xf4c}, {0x993, 0x0, 0x5}]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="0f22402f0f20e06635004000000f22e0ba410066ed3edbe3baf80c66b80012fb8666efbafc0c66edba4300b84ccbef6567f20f1ee566b9da02000066b80e00000066ba000000000f300f1c25", 0x4c}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m49.01153578s ago: executing program 1 (id=830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x1000, &(0x7f000000f000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x161, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x1, &(0x7f00000000c0)=0x9})
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[@cpuid={0x64, 0x18, {0x8, 0x40}}, @wr_drn={0x68, 0x20, {0x3, 0x30}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x2f1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x6dbc}}, @out_dx={0x6a, 0x28, {0xdf40, 0x7, 0x5}}, @out_dx={0x6a, 0x28, {0xfb92, 0x0, 0xeef}}, @set_irq_handler={0xc8, 0x20, {0xf3}}, @nested_load_code={0x12e, 0x70, {0x3, "c4a192539f7400000048b800300000000000000f23c80f21f8350c00b0000f23f8430f090f01d1676540f79061000000b92c0b0000b814000000ba000000000f30c4e253f5400066b862008ec0da980000008065430faefc"}}], 0x168})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1000000000000000)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m48.894804758s ago: executing program 2 (id=833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x8e, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x56})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000a78000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000040)="c4e37904e2090fc69106000000000f20e035400000000f22e0f2e80000008066baf80cb86fd6868eef66bafc0cec0f2176b805000000b9030000000f01c166b81d018ee80f20c035000000200f22c03e0f013f", 0x53}], 0x1, 0x70, &(0x7f00000001c0)=[@cr4={0x1, 0x150000}, @cstype0={0x4, 0xf}], 0x2)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x7000, 0xe, 0x401, 0xffffffc2, 0x0, [{0x41, 0x2, 0x5, '\x00', 0x3}, {0x4, 0xa0, 0x10, '\x00', 0x1}, {0x6, 0x1, 0x3, '\x00', 0x9}, {0x9, 0x0, 0x7, '\x00', 0x64}, {0x9, 0xfb, 0x13, '\x00', 0x4b}, {0x4, 0x8, 0xf, '\x00', 0x81}, {0xd2, 0x0, 0xfc, '\x00', 0x4}, {0x7, 0xce, 0x5, '\x00', 0x3}, {0x1, 0x1, 0xce, '\x00', 0x9}, {0xdb, 0xee, 0x7, '\x00', 0x8}, {0xfd, 0x2, 0x9, '\x00', 0x10}, {0x1, 0xc, 0x2, '\x00', 0x7}, {0x8c, 0x3, 0x7f, '\x00', 0x81}, {0x5, 0x2, 0x3, '\x00', 0x4}, {0x10, 0x0, 0x5, '\x00', 0xe}, {0x6, 0x30, 0xd, '\x00', 0xe4}, {0xfb, 0x4, 0x7, '\x00', 0x8}, {0x8, 0x1, 0x4, '\x00', 0x7}, {0x1, 0x4, 0x3, '\x00', 0x40}, {0x9, 0x7, 0x8, '\x00', 0x6}, {0x7, 0xf4, 0x7, '\x00', 0x80}, {0xbb, 0x4, 0x3, '\x00', 0xf}, {0x2, 0x78, 0x2, '\x00', 0x4}, {0xf9, 0xe, 0xd, '\x00', 0x2}]}})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x1)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x40000108, 0x0, 0x5}, {0x261, 0x0, 0x1}, {0xb84, 0x0, 0x5}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x4e}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0x304, 0x0, 0x1}, {0xafd, 0x0, 0xb}]})
ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000040)={0x56})
r16 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r12, r16, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000300)="c482c9470126261866460fd66900000f015acec461c572d54c64450f6b9600700000440f20c0350a000000440f22c02ecbf2ab0f18446e5848b800000000000000000f23c80f21f835080050000f23f8", 0x50}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype0={0x6, 0xb}], 0x1)

9m48.773577849s ago: executing program 1 (id=834):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x9f)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0xae, 0x9, 0x4, 0x0, 0x5, 0xda, 0x3, 0x5, 0x4, 0x10, 0x8, 0x3b, 0x0, 0x7, 0x2, 0x1, 0xe, 0x4, 0xfe, '\x00', 0x2, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x1, &(0x7f00000000c0)=0x9})
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[@cpuid={0x64, 0x18, {0x8, 0x40}}, @wr_drn={0x68, 0x20, {0x3, 0x30}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x2f1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x6dbc}}, @out_dx={0x6a, 0x28, {0xdf40, 0x7, 0x5}}, @out_dx={0x6a, 0x28, {0xfb92, 0x0, 0xeef}}, @set_irq_handler={0xc8, 0x20, {0xf3}}, @nested_load_code={0x12e, 0x70, {0x3, "c4a192539f7400000048b800300000000000000f23c80f21f8350c00b0000f23f8430f090f01d1676540f79061000000b92c0b0000b814000000ba000000000f30c4e253f5400066b862008ec0da980000008065430faefc"}}], 0x168})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000080)=[@cstype3={0x5, 0xd}], 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c744240081000000c744240280560000d5ff1e249124912000c4c2f9db950e000000650f01b3ba000000b9b30000400f3248b80f000000000000000f23d81e0721f83e26660f4ab3080000000f23f82e66420f6617c4c3f55ee00026650f0866baf80cb83c611185ef66bafc0cb8dd4e4c19ef0fe494599218000066b897008ed8", 0x81}], 0x1, 0x4, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f00000001c0)={{0xc000, 0x3000, 0x8, 0x7, 0x6, 0x5, 0x4, 0x1, 0x1, 0x1, 0x2, 0x2}, {0xf60a25c6df0a2507, 0xffffffff, 0x4, 0xa, 0xf, 0xb5, 0xd, 0x8, 0xa, 0xa5, 0x6, 0x81}, {0x80a0000, 0x4000, 0xd, 0x9, 0x1, 0x1, 0xfb, 0x6c, 0x9, 0x1, 0x7, 0x2}, {0x30000, 0x2000, 0xe, 0xb9, 0x7f, 0x81, 0x7, 0x8, 0xf0, 0xe, 0x40, 0x1}, {0xeeef0000, 0x0, 0x10, 0xf, 0x3, 0x6f, 0x30, 0xa8, 0xef, 0x9, 0xc2, 0x5}, {0xf000, 0xeeee8000, 0xa, 0xf, 0xfa, 0xff, 0x3c, 0x4, 0x1, 0x8, 0x7, 0x12}, {0x30000, 0xdddd1000, 0x10, 0x9, 0x31, 0x74, 0x2, 0xfb, 0x6, 0x8, 0xe, 0x1}, {0x6004, 0x1000, 0xc, 0x40, 0x9, 0x2, 0x2, 0xed, 0x5, 0x9, 0xfd, 0x2}, {0x70000, 0x9}, {0xd000, 0x8}, 0x80000010, 0x0, 0x8087000, 0x20000, 0x5, 0x400, 0x54000, 0x0, [0x8001, 0x2609e027, 0xfc, 0x686b]})
r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r14, 0xae80, 0x0)
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r16, 0xae60)

9m48.345136044s ago: executing program 2 (id=835):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f1a10e442d537be2020611310c941ac0f0173000f5864a907b8010000000f01d93e66460f388230bc0f12f2ad66b8f0a566efc74424002201000036420f01c2ff1c24", 0x44}], 0x1, 0x4, &(0x7f0000000040), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = eventfd2(0x8, 0x801)
ioctl$KVM_CREATE_VM(r3, 0x5421, 0x26)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m48.064747404s ago: executing program 1 (id=836):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x80000000c)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)={0x5, 0x0, [{0x179, 0x0, 0x8000}, {0x239, 0x0, 0x37745f89}, {0x231, 0x0, 0x100000001}, {0x8cb, 0x0, 0x6}, {0xb4c, 0x0, 0x8}]})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000300)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @efer], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000180)={0x6, 0x0, [{0x811, 0x0, 0xcfcc}, {0x39f, 0x0, 0x3}, {0x2e0, 0x0, 0x100000001}, {0xa49, 0x0, 0xb}, {0xafa, 0x0, 0xe6ec}, {0x264, 0x0, 0xb384}]})
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2})
r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="f30f0966b99d00004066b88d00000066ba000000000f300f42ddea7c00f000eedfd166b9800000c00f326635002000000f300f01cf66b99700004066b8ba71f05e66ba000000000f306766c7442400080000006766c7442402e2d200006766c744240600000000670f011c24", 0x6c}], 0x1, 0x50, &(0x7f00000000c0), 0x0)
ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f0000000040)={0x0, 0xe000, 0x3, 0x8, 0x18})
ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f00000002c0)=0xff)

9m48.064373406s ago: executing program 2 (id=837):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0xfffffffffffffffe}]})
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="66ba2000ecc4217e6f8000400000c4c279139e0a000000440f01df1559fc020a020a2e0fc79858ba0000c4a279ac6d6a66b86f008ee0262e4f0fc719b9a70a0000b80a000000bae50000000f30", 0x4d}], 0x1, 0x76, &(0x7f0000000040)=[@vmwrite={0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6}], 0x1) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m47.805805049s ago: executing program 0 (id=838):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="7ddf67670f01efb8d5008ee0f30f5370000f063ef30f589ab68366b9df0a000066b8f24e974966ba000000000f30660fc7b0a331d25f0d66b9db08000066b80200000066ba000000000f30", 0x4b}], 0x1, 0x71, &(0x7f00000001c0)=[@efer={0x2, 0x902}, @dstype3={0x7, 0xb}], 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x1b, 0x4, 0x2})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000040)="2626656736f3f20fb426b26bb805000000b9090000000f01d9643e26d8fb0fc75a002ee30e8fc97883519a2f0f87b6da0000c4e209006f4966b866000f00d0", 0x3f}], 0x1, 0x40, &(0x7f00000000c0), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000100)={0xc9, 0x0, 0xc})

9m47.805622262s ago: executing program 2 (id=839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000001c0)={0xc0, 0x0, 0x4000}) (async)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)=0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

9m47.684047238s ago: executing program 2 (id=840):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88201, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000080)={0x4, 0x8106})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000006c0)="c4c250f3d0670f017e96b805000000b9005000000f01d90fc77cd800b9b50200000f32640f68af87bd248866baf80cb828dc888f181866bafc0cb9800000c00f3235000800000f30ee0f09b91e0b0000b80000c0feba000000000f30c744240000180000c74424020c0000000f011424", 0x70}], 0x1, 0x34, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000002c0)={"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"})
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103002, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x40000010, 0x0, 0x134e}, {0x40000073, 0x0, 0x10000}, {0xbad, 0x0, 0x4}, {0xa19, 0x0, 0xaa2}, {0x9ef, 0x0, 0xa}]})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x56})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0xb7a, 0x70000, 0x4, 0xffffffffffffffff, 0x9})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xe84})
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f0000000240))
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x1)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000000c0)=@riscv64_v={0x8030000009000019, &(0x7f00000001c0)=0x4})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)

9m47.515800933s ago: executing program 0 (id=841):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x2}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x3, 0x2d8, 0x8, &(0x7f0000000080)="1148f4b8d4359eddfcf1be1550ac90ddc3c18b1b92466150f52ea24ba6eb51c1d8093b402da5726f15082b32eed29c043ceb5f05edfb191bd9e3790101ec0a71b671612da5d43bf21196a3696499a26ece1d1e25b22a519abab3fc"}, {0x1, 0x218, 0x7, &(0x7f0000000140)="cd478d638393f302fa3808e09178dad0055afa8b84c651c4d504921e246f4a178fc828063b0b83f61b9219a7b2c6b27b214783dea950ac3670fef0158775c84ffa9c38"}, {0x3, 0x6d0, 0x7f, &(0x7f00000001c0)="1242456c48c13f2647c818325957ef7786717041e9ac410fd23cb1ecacf09a0ca6bd02dc20aac0aec187243365a86313caca79a4c40d501de298d588b262758bf8d13d8c19ffa53d9e4cc6cde4c31753a7f25310cec879ec481310e1bab5ef0763a5d6114fb52b5aaef8831cc32b383fa7072555d7d66d4be16e36ccdee08b510db6cdaf0d575882c91a62f342081420792c0ad7f2031cc38d132bd2c69cf083267409bd4830967c21f42cf4265ff522a8383f89674e975d5b8be9e86b7223d30b662b9dca5db281c6cb44024571d9daf91f9d741ad87bafb479"}, {0x1, 0x4b0, 0x6, &(0x7f00000002c0)="fdc0e323eb673871ba070bcb5ab3f9e38269c2e9fa6dc4a6a38153f8e65415d21907ac0f8f609fae3354e446e9bf7ed05a97dd7ae6bb1b4abc8cc44d4df7635087a7f58885287c096affa9ab363d4ae9c9833e233ebeb120da6d9859d27af8d6e0f262b655973cda0ac9de016d5478ac3f67d10cbc72330f19e010ae08e809c2dc2fc5896c58b5932054d0383e1bea588b34ff8d0285"}, {0x1, 0x3b8, 0x6, &(0x7f0000000380)="4f4f535108d94d61a8b4eef5dad8dec0bcaf895d7b9eb9ba6a0d3d5e39c8c7df7db6fe683163d6ddb1f97d57c3904a5e85eca85e83d8f86244b8a3402b82c7b74e73fce33b089ff3d8672b6f1f18181339110cd93f8ffca57cb6438f9525b9b4f441be046929158742418d2bb04febcc64bc0143d43b44"}, {0x3, 0x3a8, 0x8, &(0x7f0000000400)="37969cab312970775f90724582d5b925fec4656cf7f3fcc23d627ed919d6a291c0ddaada89889aa565af7db15e60670ae43c2efedbda59736c14bf641fa13288fd1eb06f3462b85688dfc4b995eba8e0dff82320bb097b1c55c6ebe6e386ef744bf47de9f9c8b8e40208948f1d98851d6f9b5b88a5"}, {0x0, 0xfffffe68, 0x7, &(0x7f0000000480)="5593d7177b5c1267a6f8fa2d5e2f712edb3dede9bf7b719f91c12174ca0a2038980d314ce4a3a8ef3e0f38882bb58766c93932c6173d6678f96c3aa6a86f9b11260a46e5bbf956871c5c671277e6dc83effc3344ead9d5018fffb499baedac4dc0b18951aeda5437e1ada1699fee90d9ea873b38d338d6dfd44e3b67e13c1b04f0e3b0c9f4cf6a413252aaa2ee9ff6ac4529b12c3ee9ec4ad9c2dabc8ece5e6eac4e9579a67c8702a1df45f97c99fdfa8df9f94e65e19454f5585f93ff1a20496278a8e2d17f2fd23fc881e7d96bcbb1c1e99ccce3c419a8a11507af1e5173"}, {0x1, 0xb8, 0x7, &(0x7f0000000580)="738dd80e749dc8fde7e8a274ee214df25e125bbcc4db21"}, {0x0, 0x1c0, 0x7, &(0x7f00000005c0)="75cb3735edd0b222453a14d4fb71a66cc5017dea4d71fc03a08b20a87acbe351fad0a9a5f1c2c56c3973e12d59fa911460b414684f3925da"}, {0x3, 0x7b0, 0x41bb, &(0x7f0000000600)="aac9bb2bd4d15dc8dbf3019a63337d2eb96f03c82b0b86897869ce65d9bc6844837f1a986ce89d7bd199bec0e03562ad479eac9adf5c2f73ab671867cc4e7c3af19e7a55cb65cc5e42c56550f6c58969be80384512ee03d2074a6de73b8c6bcbf4cc3bbd2628aadde5c5b221e3d728309cd151518a3d2ee76932db39d7875e454107040a0241e8578548fd0d34910832874c32f40b98645301673ad4a942942b9392314a2f6acf5148a286708348da9e9eff50be7966a0000a1f970f4fb13b02f4e4bed9a75435539e40e785fd909cb4c02b3c576ee15de37191b80d1ca8756f66b1c6d7ea45f59a6facbe35f158e336ee89aeade5d2"}, {0x0, 0x1b8, 0x1, &(0x7f0000000700)="6be4f2a9c2de24758e35194771f3a08b2308f92c5ab00f4bb19b6e7339f4f49ea3847a2401c418b8d55d0d775517cca0cdaf34a2fe3521"}, {0x2, 0x240, 0x4, &(0x7f0000000740)="ac0567765866616eefe9abe44d698456d8bb62ffa32c9e3b5285c53d02796de593d39f8d23b625c11f1c3a0d3493bbcc9711afe515b8fe8900b82564987e0e6d567a21dfb15d0246"}, {0x2, 0x538, 0x7, &(0x7f00000007c0)="e4c2d64a22d9250f2c2e44bd63c8a0ad841ac478a039319d1a7008dbde48e3db9fc6e28f79bdeace4f8a8a693dd21f8104002d9ea6a463df7cafbdfd7d5826513d3864e5bc2e86d93f9fe65ee2bd97569561a9e07931284c9b0969a9ada6bfe0b7081ec85bfbd6a35abde1f7cbf427b17a545b46ee12328fcefaaa45fd8048b53cfa94e16ec082f47e4acea7b6db7d419681588271c632e10fe9b767845af51ba64319a7ee0326"}, {0x0, 0x380, 0x1, &(0x7f0000000880)="ad167fdf55ad0894592835833df3a4c6016ecfb47ead054299f0195c18f6f21cff7e8761bd8c4f2c27b4348c817fd378dfbe63666d024419edc986eecc46c9c5ce94f743cba76285726084a5ad5fe91427b0e1771262275c2d7f6689ee443a8f1f4f421617a661cd5257ee9a488e53ce"}, {0x1, 0x780, 0xfffffff9, &(0x7f0000000900)="96d3884721507fbf6125e77bf8114fc1b7236e09b5b02a5f1ec718a9847e1730780a15700aaab7c657f007ba5aca50df957d0211164a69340f3678e5f8faae3d6ee63cdc07286f1200c258a20a50d47149cc688fc34125873c7688d93cb95f4fe08ef4bb3c6b2f1bc06b806995de59e819259474fdbe0b574dd4e2a0b70a025ea634ef09378035d8621800f5636e5703272a435e08d13176036971164a282e6cc0f22a5cd604ce6a56f8b1b95f01ba5d108cc5f330fc4633a738b5b73fdb91342cb95d2dc28348dafd2466ad751f798bd00def001ff3ada469fcae3b894f4baa612d646406d4b0018cdccf1f175140bb"}, {0x1, 0x138, 0x8, &(0x7f0000000c00)="4abceb6be99199370d45864b08e647e418bf450b27363f2e1c1d26a323fc329dd2365eede6682c"}]}) (async)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000a78000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="66b9870a00000f3266b99e08000066b8c600000066ba000000000f30dbe00fc7a86aecbad104ed0f092e640fc72c670f236c660f72d532baf80c66b8f89ac58e66efbafc0cb895f1ef", 0x49}], 0x1, 0x50, &(0x7f00000001c0)=[@cr4, @cr0={0x0, 0x8}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48240, 0x0)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000340)={0x3, 0x0, [{0x277, 0x0, 0x5}, {0x81d, 0x0, 0xa00}, {0x801, 0x0, 0x7}]})
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f00000000c0)) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="c4c250f3d0670f017e96b805000000b9005000000f01d90fc77cd800b9b50200000f32640f68af87bd248866baf80cb808dc888fef66bafc0cb9800000c00f3235000800000f30ee0f09b91e0b0000b80000c0feba000000000f30c744240000180000c74424020c000000c7442406000000000f011424", 0x77}], 0x1, 0x34, &(0x7f0000000040)=[@flags={0x3, 0x303}, @cstype3={0x5, 0xc}], 0x2)

9m47.145931239s ago: executing program 0 (id=842):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8301, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = eventfd2(0x8, 0x801)
ioctl$KVM_CREATE_VM(r3, 0x5421, 0x110c230000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="c4c2b998a105000000f20f01dff40f20e035000010000f22e00f221ab9fb0800000f32980f350f090fc72f", 0x2b}], 0x1, 0x28, &(0x7f00000000c0)=[@cstype0={0x4, 0x1}], 0x1)
close(r2)

9m46.95307596s ago: executing program 0 (id=843):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x5, 0x0, [{0x174, 0x0, 0x1}, {0x9fa, 0x0, 0x1}, {0xb59, 0x0, 0x34b}, {0x27b, 0x0, 0x9}, {0x0, 0x0, 0x5}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080))
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x17)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="48b80058000000000000450f01cf36662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x59}], 0x1, 0x4, &(0x7f0000000080), 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m46.952833891s ago: executing program 1 (id=844):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0xacb, 0x0, 0x5}, {0x261, 0x0, 0x1}, {0xb84, 0x0, 0x5}, {0x382, 0x0, 0x6}, {0x33, 0x0, 0x51}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0x304, 0x0, 0x1}, {0xafd, 0x0, 0xb}]}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="48b80058000000000000f26736360f0936662e0f01f8b805000000b9f134f1020f01c10f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8373745f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x64}], 0x1, 0x55, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m46.794697679s ago: executing program 0 (id=845):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="3e6765f30f1ef80f01c9bad004ed3e260f38f617baf80c66b8602e0680bafc0cec0f187e000f01c50f20e06635000002000f22e03ef20f7cf7b80000", 0x3c}], 0x1, 0x4, &(0x7f0000000040)=[@dstype0={0x6, 0xa}, @dstype0={0x6, 0x1}], 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9m46.684792839s ago: executing program 0 (id=846):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="0f22402f0f20e06635004000000f22e0ba410066ed3edbe3baf80c66b80012fb8666efbafc0c66edba4300b84ccbef6567f20f1ee566b9da02000066b80e00000066ba000000000f300f1c25", 0x4c}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{0x40000098, 0x0, 0x6}, {0x8cb, 0x0, 0xfffffffffffff431}, {0xa0e, 0x0, 0x2}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x4134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x4000000001}, {0x0, 0x0, 0x3}, {0x9b8, 0x0, 0xb9}]})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9m46.684270345s ago: executing program 1 (id=847):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x45, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x27e, 0x0, 0xce2}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000005c0)={0x6, 0x0, [{0x3f6, 0x0, 0x9}, {0x8a8, 0x0, 0x4800000000}, {0x213, 0x0, 0x9}, {0x211, 0x0, 0x5}, {0xbd8, 0x0, 0x9}, {0x503, 0x0, 0x3}]})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="660f3880799fe30d2e360f230e0f784863baf80c66b8cabca58c66efbafc0cb88dd6ef82176c66b9800000c00f326635008000000f3065260f182c0f060f23d2", 0x40}], 0x1, 0x40, &(0x7f00000000c0), 0x0)

9m46.50542224s ago: executing program 2 (id=848):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@cr0={0x0, 0x80000000}, @flags={0x3, 0x86016}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0xc0000102, 0x0, 0x7ff}, {0xbbd, 0x0, 0x7}, {0xac0, 0x0, 0x10000}, {0x1db, 0x0, 0x9}, {0x9a4}, {0xa09, 0x0, 0x10000}, {0xb4d, 0x0, 0xe}, {0x770, 0x0, 0x5}, {0x8a1, 0x0, 0x4704}]})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xc000) (async)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xc000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{0x289, 0x0, 0xfffffffffffffffa}, {0x9fc, 0x0, 0x7}, {0x932, 0x0, 0x8}]})
syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="9a85000f0026dee20fae3066b9800000c00f326635001000000f3066b9080300000f3266b98108000066b80200000066ba000000000f300f01c566da71e8363e0f62617536f7de", 0x47}], 0x1, 0x44, &(0x7f0000000240)=[@cstype0={0x4, 0xd}, @efer={0x2, 0xc000}], 0x2)

9m31.284130233s ago: executing program 32 (id=846):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="0f22402f0f20e06635004000000f22e0ba410066ed3edbe3baf80c66b80012fb8666efbafc0c66edba4300b84ccbef6567f20f1ee566b9da02000066b80e00000066ba000000000f300f1c25", 0x4c}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{0x40000098, 0x0, 0x6}, {0x8cb, 0x0, 0xfffffffffffff431}, {0xa0e, 0x0, 0x2}]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x4134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x4000000001}, {0x0, 0x0, 0x3}, {0x9b8, 0x0, 0xb9}]})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9m31.224120435s ago: executing program 33 (id=847):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x45, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x27e, 0x0, 0xce2}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000005c0)={0x6, 0x0, [{0x3f6, 0x0, 0x9}, {0x8a8, 0x0, 0x4800000000}, {0x213, 0x0, 0x9}, {0x211, 0x0, 0x5}, {0xbd8, 0x0, 0x9}, {0x503, 0x0, 0x3}]})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="660f3880799fe30d2e360f230e0f784863baf80c66b8cabca58c66efbafc0cb88dd6ef82176c66b9800000c00f326635008000000f3065260f182c0f060f23d2", 0x40}], 0x1, 0x40, &(0x7f00000000c0), 0x0)

9m31.193175115s ago: executing program 34 (id=848):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@cr0={0x0, 0x80000000}, @flags={0x3, 0x86016}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0xc0000102, 0x0, 0x7ff}, {0xbbd, 0x0, 0x7}, {0xac0, 0x0, 0x10000}, {0x1db, 0x0, 0x9}, {0x9a4}, {0xa09, 0x0, 0x10000}, {0xb4d, 0x0, 0xe}, {0x770, 0x0, 0x5}, {0x8a1, 0x0, 0x4704}]})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xc000) (async)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xc000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{0x289, 0x0, 0xfffffffffffffffa}, {0x9fc, 0x0, 0x7}, {0x932, 0x0, 0x8}]})
syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="9a85000f0026dee20fae3066b9800000c00f326635001000000f3066b9080300000f3266b98108000066b80200000066ba000000000f300f01c566da71e8363e0f62617536f7de", 0x47}], 0x1, 0x44, &(0x7f0000000240)=[@cstype0={0x4, 0xd}, @efer={0x2, 0xc000}], 0x2)

2m54.802290869s ago: executing program 5 (id=3689):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000100)=0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181a00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000080))
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000480)="670f01d6670f090f38cd0166b9800000c00f326635001000000f300f7eb600000f20d86635080000000f22d866b8342200000f23d00f21f86635200000070f23f80f01c8ba400066b8010a5a1d66ef360f0f47d2a7", 0x55}], 0x1, 0x3c, &(0x7f00000000c0), 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002280)="26f20f0748b8b2900000000000000f23c00f21f835000004000f23f866baf80cb8f081c482ef66bafc0cedb9890b00000f3236f30fc73245f4c4e2d504b694987094b9800000c035004000000f303645f4410fc7347c", 0x56}], 0x1, 0x44, &(0x7f0000000040)=[@dstype3={0x7, 0x9}, @vmwrite={0x8, 0x0, 0xa, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffd}], 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r8, 0x4068aea3, &(0x7f0000000400)={0xce, 0x0, r6})
ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f00000001c0)={0x1, 0x0, @pic={0x62, 0x81, 0x80, 0x81, 0x94, 0x56, 0x4, 0x8, 0xf, 0x2, 0xf0, 0x4b, 0xb, 0x1, 0x9, 0x6}})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0xa7)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x6a6, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)={0x56})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m54.62220641s ago: executing program 5 (id=3691):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000015000/0x1000)=nil, r6, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async)
ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000080)={0x2, 0x8106}) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000640)="0f01ca0f0748b8898e0000000000000f23c80f21f8350c00c0000f30410f01c4460f421482430f01c8f30f09f30fa7d8420f35", 0x33}], 0x1, 0x64, &(0x7f0000000600), 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="640f0131410f017500b951020000b800000080ba000000000f308fe9e0911bc4e17173f10f66410f38813b66baf80cb8523bae87ef66bafc0c66b80a0066ef7a086666410f388216410f01c1", 0x4c}], 0x1, 0x34, &(0x7f0000000040), 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000015000/0x1000)=nil, r4, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r12 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
close(0x3) (async)
ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x100000, 0x8, 0xffffffffffffffff, 0xc}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8c0})
r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r13, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)

2m54.372250472s ago: executing program 4 (id=3692):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{0x2a, 0x0, 0x671}, {0x585, 0x0, 0x4}, {0x8cc, 0x0, 0x4}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @pic={0x8, 0x92, 0x5, 0x2, 0x2, 0x2, 0xc, 0x5, 0x9, 0x2, 0x7, 0x3, 0x81, 0x5, 0x9, 0xd0}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r8, 0x4068aea3, &(0x7f00000001c0))
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="f30f09f4660f383e49000f32660fc5f450ba410066ed0f08660fd3d4ba410066ed8b5905", 0x24}], 0x1, 0x40, &(0x7f0000000040)=[@cr4={0x1, 0x200050}, @cr4={0x1, 0x220000}], 0x2)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r10, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="8fe978958b84f000000f01d1f3aa0f1cee36f2f6a1f3ffffffc4e1a3d0f08fe978d7b703e80000d5c3f4b9180600000f32e5", 0x32}], 0x1, 0x40, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2m54.282158278s ago: executing program 5 (id=3693):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000450f01cf36662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x59}], 0x1, 0x40, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x2, 0x0, 0x7}, @cr0={0x0, 0x20010010}], 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x400000f2, 0x0, 0x5}, {0x261, 0x0, 0x1}, {0xb84, 0x0, 0x5}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x4e}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0x304, 0x0, 0x1}, {0xafd, 0x0, 0xb}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f00000001c0)={0xc9, 0x0, 0xc})
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x6000})

2m54.191008548s ago: executing program 3 (id=3694):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f00000001c0), 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0xffffffffffffffad)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101880, 0x0) (async)
ioctl$KVM_CAP_PTP_KVM(r6, 0x4068aea3, &(0x7f0000000240))
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1)
ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x4, <r12=>0xffffffffffffffff})
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x4, 0x10001, &(0x7f0000000080)=0x4})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000340)="b892d338350f23d00f21f8350000000c0f23f80f210eb9ac090000b800000000ba000000800f30f30f09640f08b969060000b8de7d9923bafe2bdf4e0f30c4c151c404c0002e0fc7ac0f09000000c4c3554a74d151000f20d835200000000f22d8", 0x61}], 0x1, 0x40, &(0x7f0000000200)=[@cstype3={0x5, 0x2}], 0x1) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m53.969629571s ago: executing program 3 (id=3695):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="450f32c442d537670096c461a5104c534c530f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x47}], 0x1, 0x40, &(0x7f0000000040), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x1, 0x0, [{}]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68202, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f0000000040), 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000040)={0xd629b2df8b277ef1, 0x11d000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, &(0x7f0000000080)={0x8000000, 0x1e000})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="660f300f080f017feaba4000ed66b9320200000f32ba6100b80e00ef660f3801ce0f229767260f01cf66b9800000c00f326635000800000f30", 0x39}], 0x1, 0x72, &(0x7f0000000080), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x1)

2m53.969305832s ago: executing program 5 (id=3696):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002280)="26f20f0748b8b2900000000000000f23c00f21f835000004000f23f866baf80cb8f081c482ef66bafc0cedb9890b00000f3236f30fc73245f4c4e2d504b694987094b9800000c035004000000f303645f4410fc7347c", 0x56}], 0x1, 0x44, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x9, 0x5, 0x0, 0x8, 0x4, 0xfe, 0x43, 0xff, 0x3, 0xb8, 0x6, 0x0, 0x9, 0x9, 0x82, 0x5, 0x8, 0x10, '\x00', 0xb, 0x8000000000000002})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005340)=@vmx={0x104, 0x0, 0x2080, {0x58000, 0xe000, {}, 0x1, 0x9}, {"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", "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"}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000002c0)={0x0, 0x4b564d02, &(0x7f0000000100)="f802445409c9b1f0e4add39e7b64d635ce93fe5ac1ebb3", &(0x7f00000001c0)="fcde60cbebfb55720f0c1f512ed0bd69ccfa223cfc8b1b964415623cd7a954210e92c20a666941e01cfb44d3bd048cea5562dffd999946c5d59f5610af88233cb3e4e0ca6fb0d3b853e163426a20895541c6a6b62fd89757bbe2f249ef8c3dd222ee84d3aeb78cc1b639c6e0326e22cb12a7ee383dd47f3a14dd20c22926d4169d8416fc1acd52518f5eeec3c5ee5e0d499db8dd12b232a962b14e622dd18a39b2c05c9b2a39d7890224d55d6990444d1aab792a16723b2dbd8073d082f391cdc96e252d2ab14b09a2408f8e419924628ac1d3ac6f47c2b21e4bada8f69a35813c8dec9cce018cde03ab671ea99fe10f3f8065caab3c", 0x17, 0xf6})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

2m53.901409767s ago: executing program 4 (id=3697):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@nested_amd_set_intercept={0x181, 0x30, {0x3, 0x9, 0xf473}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0xbdf, 0x3}}, @cpuid={0x64, 0x18, {0x2, 0x50b}}, @nested_vmresume={0x130, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x0, 0x10001}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x26000, 0x2f70}}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x67, 0x7fff}}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x401, 0xe}}, @cpuid={0x64, 0x18, {0x69, 0x9}}, @code={0xa, 0x44, {"44f466ba4200ec66b83c000f00d83e430f789d05000000470f30f2470f51290f78370fc7b50b0000000f32430f798580000000"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x3a8, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xf, 0x100}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xffff, 0x2, 0x1}}], 0x2ac})
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000300)={0x5, 0x0, [{0xc0000001, 0x8, 0x0, 0x400, 0x8, 0x7f, 0xc66a}, {0x80000000, 0x6, 0x0, 0x7, 0x8, 0x5, 0x800}, {0x7, 0x53a9, 0x2, 0x7, 0x33d, 0x3, 0x5}, {0x7, 0x5, 0x0, 0x4, 0x5, 0xa377, 0x940}, {0x7, 0x1, 0x0, 0xfffffffe, 0x6, 0xffffff7f, 0x1}]}) (async)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000400)="430f010766410fd4f20fc7b734b5000066b859000f00d066baf80cb8ec7ec283ef66bafc0ced0ff213c74424009d000000c7442402294c0000ff1c2448b8113a2124e6424f690f23d80f21f835400000900f23f8420f78872e0000000f01bf00800000", 0x63}], 0x1, 0x1, &(0x7f00000004c0)=[@dstype3={0x7, 0xa}], 0x1) (async)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000500)) (async)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000580)) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x40, 0xa7, 0x0, 0x4, 0x6, 0x40, 0x2, 0x2, 0x7, 0xa, 0xa0, 0x4, 0x9, 0x0, 0x9, 0xb}}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000840)="0f225c2ee30066b93e09000066b8c033000066ba000000000f30d925baf80c66b84a04658566efbafc0cb89f1eef660f388200b8ee098ed867670fc73d8f0000006664640f01990000dcf2", 0x4b}], 0x1, 0x8, &(0x7f0000000900)=[@dstype0={0x6, 0xc}], 0x1) (async)
r4 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b)
r6 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000fd3000/0x18000)=nil, &(0x7f00000009c0)=[@text16={0x10, &(0x7f0000000940)="3e0f01c8bad104ec6766c7442400000000006766c7442402030000006766c744240600000000670f011424baf80c66b86a65fe8766efbafc0cec66b99208000066b8d77f000066ba000000000f30f3a436d3fbf080670d00f0107300360f01c2", 0x60}], 0x1, 0x20, &(0x7f0000000a00)=[@cstype3={0x5, 0xe}, @cr4={0x1, 0x4b9}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000a40)={0xb6, 0x0, 0xfffffffffffffffa})
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000ac0)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) (async)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000c40)={0xb, 0x3, 0x4})
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34)
ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000c80)={0xc0, 0x0, 0xa000})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10)
ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000d00)={0x2, 0x0, @pic={0x81, 0x7f, 0x7, 0x0, 0xf, 0x0, 0xf7, 0x6, 0x9, 0x9c, 0x2, 0xfb, 0x23, 0x8, 0x7, 0x3}}) (async)
ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000f40)=0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000f80)={0x1ff, 0x0, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000001000)=@arm64_core={0x6030000000100002, &(0x7f0000000fc0)=0x960})
r9 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000001040)={0x2, 0x0, [{0x2, 0x5, 0x0, 0x0, @msi={0x4, 0x3, 0x9, 0xfff}}, {0x3, 0x3, 0x1, 0x0, @adapter={0x10000, 0x2af, 0x0, 0xfffffffe, 0x401}}]}) (async)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f00000010c0)={0xed, 0x0, 0xffffffffffffffff})

2m53.831562754s ago: executing program 4 (id=3698):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]}) (async)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200), 0x0) (async)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x87c, 0x0, 0x89c}, {0x2d7, 0x0, 0x10000}]}) (async)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000340)={0x3, 0x0, [{0x277, 0x0, 0x5}, {0x81d, 0x0, 0xa00}, {0x801, 0x0, 0x7}]}) (async)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0xbf, 0x100000001, 0x1, 0xffffffffffffffff, 0x1ff, 0x4, 0x4, 0x2, 0x1, 0x5, 0x3ff, 0xbe91, 0x5, 0x9, 0x4], 0x0, 0x1}) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) (async)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r13, 0x4008ae48, &(0x7f0000000140))
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000200)="d0962d4726ec660fe7a60020f20f01df2e0f01c4660f5e4aaa0f01ca0fc7706d660f5419", 0x24}], 0x1, 0x1, &(0x7f00000001c0), 0x0) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

2m53.672015558s ago: executing program 4 (id=3699):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="66b9c10000000f32ba410066b80000000066ef67660f38094a00660fdedc2e660f3a0d1ab966b9420600000f32f30fc7b00008660fdcd00f7656880f09", 0x3d}], 0x0, 0x40, &(0x7f0000000080)=[@cr0={0x0, 0x80000022}, @cstype3={0x5, 0xf}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000380)=0xfec00000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000fa5000/0x4000)=nil, r10, 0x3, 0x12, r11, 0x0)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_EMULATED_CPUID(r12, 0xc008ae09, &(0x7f0000000100)={0x4, 0x0, [{0x0, 0x6, 0x4, 0x7, 0x0, 0x5, 0x8}, {0x40000001, 0x2, 0x2, 0x0, 0x29e, 0xa, 0xb4a3}, {0x6, 0x8, 0x2, 0xfffffffb, 0x3, 0x7f, 0x1}, {0x4, 0x80000, 0x0, 0x8, 0x1, 0xff, 0x1}]})
mmap$KVM_VCPU(&(0x7f0000017000/0x4000)=nil, r10, 0x0, 0x110, r5, 0x0)
r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x6)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)
r14 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r14, 0x4068aea3, &(0x7f0000000140))
r15 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r15, r16, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="48b80058000000000000f26736360f0936662e0f01f8b805000000b9f134f1020f01c10f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8373745f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x64}], 0x1, 0x55, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r16, 0xae80, 0x0)

2m53.622235942s ago: executing program 5 (id=3700):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000001c0)={0xc0, 0x0, 0x4000})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x4000001e, 0x0, 0x5}, {0x261, 0x0, 0x1}, {0xb84, 0x0, 0x5}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x4e}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0x304, 0x0, 0x1}, {0xafd, 0x0, 0xb}]})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x8e7, 0x0, 0x80000000}, {0x40000071, 0x0, 0x7}]})
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r8, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="48b8005800000000000092f26736360fa709a7092e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5d}], 0x1, 0x48, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8c0})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f00000001c0), 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000001c0)=0x58000)
ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000280)={"334c9e362c3da5cbe6abb60a133f2e57e6df43be18a969baac360bdb32eb85c12cce7b126c05a49a950f88454493867f89a4e7a4a30d49f814ef74e9340200078e094e218a425bdfccd562166e17e7f1ab419148024241a0afb8ce407a2bc00e38b19a6f4bf61a64b41fd531cf16f62b143bf229f472f957149a5a914819029a43d2f3d05d1f5b91df2880eee67d47360be66827de965ebc3cd68f9812f17671133ac1a771cc662e5511b448b0b68b81f65dc356b677e169c0abcaa7eebba1d9e9dc200dc588a170634283706a56d4ec46f33f4e73a983d5581504e8e7d4d903d3c5e3eca29fd83b7e1569ce650666274e4742d30a2e40bab7fd3df907a9e3d1ce37cbde5fd64d8aadeda9eafba0d990be26b94c2c9dac15054eee0e7291f97ff092b60e45d8ef20e5f8ad493ce1ca25301d127779c840f0cc98f09176febacb666a944a7a904511c5a071382b2fa5ff3c58cb6b55383a0f0bcc10449d8865f52ea18c0575f8444793492f40c240794ef5f508c29da73ca676b0ae31857537574d7b79293c55bbaf56f25acf356c4a052e9ad8472cadb93975e9b4ffd35045af870b81fc9665851774d041eb79a8fa8e3b0ad9f4bb7eb6c676d3c3930699d53e6b0cc4b2ca90542828ccab43c405ea930f5c869c4304fca0861ec27edf2404809cfcb0a2907a1ba969c023077ab456ac715b20069298a6e397a67f14a07f500afcb96262dcc34e8b8a4ec7eab14d73f4cfee311d4787c11c253cf136bbe4a18f8043708b6675494597b59c79af6db9af37b980f57a68aa82106cfdb4a9db8af8a1ea373a6f14296a84f8192e249504d5fe86d6be5394cf998c117c714e9b6bd94bdb8ef8a9fa0320bbc2d62483cce04bd57260a5afdeb2f17d9f24612c4701a61d710874c84242d1b5fef5f3c50bf4c1fb351f1c37854dcf9fcadc8fd13674d80f7dbc638a888d850fd7002216bb42f1f01853843fd80534d04310bc1739b73240d67a25ebd6e26be54b0492a9fcc5e9795e35b825c4e869c2835df45dc6a02e65032de4bc9f95dcc9070da8fb275b0f6705238f39ee37577ff85835f9f0266ae7320292d2f9c6fbf44bef2fca2b004767bf1019d9be2d0e3655f6b6a652265dd0effcf7a6e9f8245ea9ad5c8c8fd0e882c092e335e94ba25a9b9e834d89708c741ba6229453a329977a3a63bb0f02d83fe3be4169afcee167c2f220d80766d30dc9643695a01f7d8636fc7711282b29ff0528ba95560f086ea9d049b57c4cd0de8b80a57e9eff97e92ae86042f66c31c32fe8813d08320e6aa5906bf17fd65a2b8f7f99ad7c97136f110308bf7635b131dae8119bc49799521f1c9eab7cb170937d1ec97c831f997dff83d3fc9188ad28499817cd287c581b947c8a08e1531264f287720de0743e5c1c529360a7cccec93e4b599276d80bc57d06e1f841d6e2"})
ioctl$KVM_S390_VCPU_FAULT(r10, 0x4008ae52, &(0x7f0000000040)=0xf8)

2m53.442374395s ago: executing program 3 (id=3701):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x53d})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x7})

2m53.441907551s ago: executing program 4 (id=3702):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)=@x86={0xae, 0x9, 0x9, 0x0, 0x5, 0xda, 0x3, 0x5, 0x6, 0x10, 0x8, 0x3b, 0x0, 0x7, 0x2, 0x1, 0xe, 0x4, 0xfe, '\x00', 0x2, 0x8})
ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000040)={0x40002, 0x0, {[0xfffffffffffffff9, 0x9, 0x5, 0xbd, 0x9, 0x80000000, 0x9, 0x90000000000000]}})
r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x101)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="c401fc2b9a3900000066baf80cb864583183ef66bafc0cb808000000efc461cd582dcb6a0000c744240000640000c744240200b0feccc7442406000000000f01142426460f381db4cab5c50000410f015eadc7442400c9000000c744240200180000ff1c24c481f1dec3b9b40b0000b854260000ba000000000f306766460f1ef4", 0x81}], 0x1, 0x40, &(0x7f00000001c0), 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m53.350118497s ago: executing program 3 (id=3703):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x586, 0x0, 0x134e}, {0x40000081, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x79, 0x0, 0x3}, {0xabc, 0x0, 0x4a98ffbd}]}) (async)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x56})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) (async)
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r9, 0x8, 0x11, r10, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="6626660f38816ae30fc7ae0080ba430066ed0f20d86635080000000f22d864d9ff0f00040f01ca66b9c80200000f320f093ef20f2b04", 0x36}], 0x1, 0x51, &(0x7f00000000c0), 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m53.252196071s ago: executing program 4 (id=3704):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000015000/0x1000)=nil, r1, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd1)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00003f1000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="640f0131410f017500b951020000b800000080ba000000000f308fe9e0911bc4e17173f10fc441455ecf66baf80cb8523bae87ef66bafc0c66b80a0066ef7a086666410f388216410f70c1", 0x4b}], 0x1, 0x34, &(0x7f00000000c0)=[@cstype3={0x5, 0xc}], 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x1, &(0x7f00000000c0)=0x9})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[@cpuid={0x64, 0x18, {0x8, 0x40}}, @wr_drn={0x68, 0x20, {0x3, 0x30}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x2f1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x6dbc}}, @out_dx={0x6a, 0x28, {0xdf40, 0x7, 0x5}}, @out_dx={0x6a, 0x28, {0xfb92, 0x0, 0xeef}}, @set_irq_handler={0xc8, 0x20, {0xf3}}, @nested_load_code={0x12e, 0x70, {0x3, "c4a192539f7400000048b800300000000000000f23c80f21f8350c00b0000f23f8430f090f01d1676540f79061000000b92c0b0000b814000000ba000000000f30c4e253f5400066b862008ec0da980000008065430faefc"}}], 0x168})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
munmap(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})

2m53.128741961s ago: executing program 5 (id=3705):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_PTP_KVM(r4, 0x4068aea3, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="f30f0966b99d00004066b88d00000066ba000000000f300f42ddea7c00f000eedfd166b9800000c00f326635002000000f300f01cf66b99700004066b8ba71f05e66ba000000000f306766c7442400080000006766c7442402e2d200006766c744240600000000670f011c24", 0x6c}], 0x1, 0x50, &(0x7f00000000c0), 0x0)

2m53.123846194s ago: executing program 3 (id=3706):
syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="d2a21d58629d9edbf98e2000f73eaa9082aef51305e0f6ee", 0x0, 0x18)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0x10001, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x1c, 0x7, 0x78, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x7a, {0x3, "c74424006e000000c7442402d7100000ff1c24410f01c5c7442400f2900000c744240201000000c7442406000000000f011424b21dd0519e8f6978c7db430fc7b000d0ffff363ef30f06460f013666baf80cb8947cf682ef66bafc0cb8a2000000ef"}}, @wr_drn={0x68, 0x20, {0x5, 0x8}}, @in_dx={0x69, 0x20, {0x2213}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x51b, 0xaf34}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0xd6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x13fb}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x27a})
r2 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r0, 0x1000000, 0x4010, r1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000300)=@arm64={0x2, 0x3e, 0x9, '\x00', 0x9})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000340)="b800008ec066670f09b80a008ee066b9540b000066b8cc00000066ba000000000f30baf80c66b8b4d9e68466efbafc0c66ed362e36660f38809cb53eb80c008ec00f00db0f0177000f01d9", 0x4b}], 0x1, 0x1, &(0x7f0000000400), 0x0)
ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000ffc000/0x1000)=nil)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r6 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r7 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)=@svm={0x9, 0x1, 0x1080, {0x1}, {"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"}})
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000014c0)={0x81, 0x0, 0x2})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000001540))
syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000fa1000/0x18000)=nil, &(0x7f0000001600)=[@textreal={0x8, &(0x7f00000015c0)="0f01f00fc7a9901e0f0dacf7e70fc737c014000f08660f3881383d0e00660f71e20c0f0d7d01", 0x26}], 0x1, 0x1a, &(0x7f0000001640), 0x0)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000001680))
r8 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000001940)={0x0, &(0x7f0000001700)=[@nested_load_code={0x12e, 0x6d, {0x1, "48b800480000000000000f23c00f21f83501000a000f23f8f040800cad00000000a36726440f06640f01d166ba4200b0cdee360f01c864652e362ef3400fc730430f001d74000000450f0966baa00066b8008066ef"}}, @wrmsr={0x65, 0x20, {0x2ec, 0x8}}, @uexit={0x0, 0x18, 0x7fffffff}, @set_irq_handler={0xc8, 0x20, {0xf8}}, @wrmsr={0x65, 0x20, {0x40000071, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xfffffffffffffffd, 0x8}}, @wr_drn={0x68, 0x20, {0x5, 0x3}}, @wr_drn={0x68, 0x20, {0x2, 0x5}}, @wr_crn={0x67, 0x20, {0x3, 0x24000000000}}, @rdmsr={0x66, 0x18, {0x82d}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4e6, 0xdc3, 0x2, 0x3a82}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x1, 0x666}}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x20d})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000001a00)=0x5)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000001a40)="cdf31c4ce03200bb9a8fbb204b0c8bbbd3c349c283f67df72afb94749361c9fa38f1771c194b943a8df4b03017182e7b4503ea5cae48b9c72717eb56783a9745b78704daa6123781", 0x0, 0x48)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000001ac0)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]})
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000001c00)={[0x101, 0xec, 0x80000000, 0xe08, 0x0, 0x1, 0x4, 0xffff, 0x6, 0x81, 0x2, 0x6, 0x2, 0xfd3ddeb, 0x8, 0x0, 0x2, 0x1b, 0x10001, 0x7, 0xfffffffd, 0x0, 0x78ae, 0xfffffffc, 0x9, 0xedcc, 0x3, 0xffffffff, 0x6, 0x4, 0x6, 0x0, 0x80000001, 0x9, 0x1, 0x1, 0x2, 0x16080000, 0x2, 0x6, 0xee, 0x3, 0x6, 0x6, 0xa46, 0x5, 0xfffffff7, 0x9, 0x1, 0x7fff, 0x0, 0x154c5145, 0x5, 0x8, 0x7fff, 0x40, 0x6571, 0x3, 0xb1f6, 0x7fffffff, 0x7, 0x7, 0x80, 0x1, 0x10, 0x3, 0x5, 0x4, 0x6, 0x56, 0x1, 0x9, 0x16d, 0x5, 0xffff, 0x8000, 0x0, 0x1, 0x9, 0x3, 0x9, 0x1000, 0x401, 0x5, 0x6, 0x2, 0x9, 0xfffffff9, 0x8, 0x1, 0xba2, 0x5, 0x7, 0x5, 0x100, 0x3, 0x2, 0x0, 0x3, 0xe000000, 0x80, 0x8, 0x7747082d, 0x4, 0x47f5, 0x8001, 0x789, 0x80, 0x3, 0x4, 0x2, 0x401, 0x8, 0xc, 0x7fff, 0x9, 0x3ff, 0x6, 0xfffffff9, 0xef, 0x80000001, 0x1, 0x100, 0x3, 0x0, 0x1ff, 0x1000, 0x10, 0x3, 0x8, 0x4, 0x7f, 0x7ff, 0x10, 0xeea, 0x6, 0x8, 0x7fff, 0x7, 0x6, 0x80000001, 0x6, 0xebd, 0x3, 0x7f, 0x7, 0x0, 0xc74, 0x10, 0xfffffff8, 0x8, 0x80000001, 0x9, 0x8, 0xffff, 0xfd, 0x6, 0x49, 0x34521c44, 0x3, 0x5, 0x3, 0xfffffff9, 0xfffff00a, 0x10000, 0x4, 0x4, 0x3, 0x0, 0x2, 0xd, 0xe, 0x1, 0x4, 0x8, 0x3, 0x0, 0x5, 0x3, 0x9, 0x8000, 0xffffff00, 0x7ff, 0x2, 0xbc, 0x40, 0x61c, 0xc96, 0x80000000, 0x1, 0x0, 0xa4, 0x1, 0x0, 0x80, 0x2, 0x3, 0x5, 0x5, 0x0, 0xbe, 0x7, 0x7, 0x0, 0x525, 0x81, 0x7, 0x2, 0x1, 0x1000, 0x5, 0x0, 0x3d, 0xfffffffb, 0x10000, 0x0, 0x10001, 0x8, 0x3, 0x8001, 0xfff, 0x9, 0x1, 0xff, 0x3ff, 0x2, 0x3, 0x5, 0x6, 0x3, 0x4254, 0x0, 0x6, 0xc3, 0x8, 0x9, 0x0, 0xf4, 0x6, 0x6, 0x8, 0x1, 0x1, 0x9, 0x7f, 0x1, 0xff, 0x3, 0x3, 0xc00000, 0x8000, 0xfffffff7, 0x7, 0xf37, 0xfffffffb, 0x12, 0x7, 0x3ff, 0x0, 0x7fffffff, 0x80000000, 0x7fffffff, 0x0, 0x2, 0x8, 0x2, 0x8, 0x5, 0x7ae, 0x3000, 0x4, 0x5378, 0x5, 0x1ff, 0xbc03, 0xc, 0x2, 0xda, 0x1, 0x2, 0xf865, 0x3, 0x9, 0x4, 0x6, 0x9, 0x3, 0xc, 0x9, 0xd016, 0x6, 0xcc9a, 0x9, 0x5, 0x6, 0x8, 0x9, 0x3, 0xfffffff9, 0xa, 0x0, 0x3, 0xff, 0x331ba0f7, 0x2, 0x9, 0x0, 0x5, 0xfffffffc, 0x7, 0x5, 0x3ff, 0x81, 0x94e, 0xbda, 0x32c6, 0x2, 0x9, 0x5, 0x7, 0x4, 0x6, 0x40, 0x10001, 0xffff, 0x6, 0x7, 0xffff, 0x1, 0x3, 0x5, 0x5, 0x3a, 0x81, 0xc, 0x200, 0x100, 0x3bb9, 0x0, 0x401, 0x1, 0x8000, 0x3, 0x6, 0x1, 0xa4, 0x1, 0x2, 0x0, 0x3, 0x0, 0x9, 0x8, 0x6, 0x7, 0x9, 0x80000001, 0x8d, 0x2, 0x6, 0x7, 0x80000000, 0x4, 0x101, 0x2, 0x81, 0x7ff, 0xde, 0x3, 0x7, 0x3, 0xfffffedc, 0x0, 0x0, 0x7, 0x8, 0x8001, 0x96a1, 0x5, 0x5, 0x6, 0x3, 0x400, 0x8, 0x8000, 0x0, 0xa5, 0x6, 0xf, 0x1, 0x1, 0x0, 0x40, 0x1, 0x2, 0x9, 0x9846, 0x0, 0x7fffffff, 0x3, 0x3, 0x0, 0xa84e, 0x4, 0x1000, 0x2e5, 0x8c2b, 0x3, 0xfffffffe, 0x4, 0xfd, 0x7, 0xd, 0x0, 0x7, 0x7, 0x95, 0x1, 0x4, 0x3ff, 0x2, 0x7, 0x9, 0x9a8, 0x1, 0xb, 0x40, 0x10, 0x9, 0xda, 0x7fff, 0x80000000, 0xcfa6, 0x0, 0x4173, 0x9, 0x3, 0x8, 0x0, 0x39b9, 0x9, 0x9, 0x7ff, 0x3, 0x90000, 0x3, 0x7, 0x5, 0x3, 0x400, 0x7, 0x4, 0x82, 0x8, 0x200, 0x4, 0x2, 0x0, 0x200, 0x3, 0x2, 0x200, 0xb4000000, 0x2, 0x83, 0x3, 0x8, 0x80000001, 0x8000, 0xf, 0x5, 0x10, 0x4, 0xc, 0x0, 0xed5, 0x2, 0x3, 0x9, 0x58, 0x0, 0x7, 0x1000, 0x5, 0x7fff, 0x0, 0x201, 0xff3, 0x401, 0x69, 0x1, 0x0, 0x6, 0x47, 0x3, 0x3, 0x1000, 0x0, 0x6, 0xfffffffd, 0x2, 0x13, 0x4, 0x4, 0x6, 0xdb, 0x5, 0x2a7e, 0x6b8, 0xff, 0x0, 0x1, 0x5, 0x2, 0x30000000, 0x0, 0x7fffffff, 0x737, 0x68c, 0x8, 0x5, 0x8, 0x7, 0x0, 0x1, 0x1, 0x5, 0x7, 0x8001, 0x0, 0xe8, 0x1ff, 0x101, 0x2, 0x1, 0x4, 0x7fff, 0x8, 0x34, 0x8fc, 0x6171, 0x6, 0x6, 0x0, 0x0, 0x8001, 0x7, 0xffffff82, 0x17, 0x6, 0x1, 0x0, 0x5, 0x3, 0x4, 0x2, 0x8, 0x4, 0x2, 0x5, 0x6, 0x0, 0x3, 0x4, 0x6, 0xe, 0x7, 0x8, 0x4, 0x884d, 0x0, 0x6, 0x100, 0x0, 0x7, 0x3, 0x7, 0x1, 0x8, 0x9, 0x3, 0x1, 0x5, 0x9, 0x2, 0x8, 0x7f4, 0x1, 0xeaf2, 0x7, 0xc, 0x8, 0x5, 0x9, 0x0, 0x5, 0x9, 0x9, 0xffffffff, 0x1, 0xda1, 0x10, 0x4, 0x6, 0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x3, 0x2, 0x5, 0x10000, 0x41, 0x7, 0x31, 0x4, 0x3, 0x1, 0x8, 0xf5b8, 0x2, 0xb, 0x8, 0x4, 0x7, 0x1, 0x2, 0x2, 0x9, 0x0, 0x2, 0xf1, 0x5, 0x2, 0x8, 0x2b5, 0x5, 0x7f, 0x8, 0x3, 0x914a, 0x4, 0x8, 0x0, 0x5, 0x6, 0x4f, 0x2, 0xd5, 0x2, 0x2, 0x6, 0xb862, 0xa, 0x7, 0x1, 0x5, 0x80000000, 0xaa, 0xcce, 0x2, 0xffffffff, 0x207, 0x7, 0x7fffffff, 0x8001, 0x8, 0x7, 0x3, 0x1, 0x7fffffff, 0x3, 0x9, 0x4, 0x6, 0xb84, 0x80, 0x0, 0x401, 0xc1a4, 0x2, 0x3, 0xca, 0x80000000, 0xcd, 0x23f7, 0x8, 0x7, 0xf, 0xfffffffe, 0x9fe, 0x3, 0x100, 0xffff8001, 0x8, 0x8, 0x8, 0x1, 0xfffffff3, 0xea62, 0x8, 0x0, 0x10000, 0x621, 0x813259c, 0xb90, 0x0, 0x7fffffff, 0x2, 0x4, 0x5, 0x4, 0x401, 0xfffffffe, 0x7, 0x1, 0x7, 0x4, 0x9, 0x6, 0x3, 0x5, 0x3000, 0xffffff4d, 0x4594, 0xff, 0x200, 0x101, 0x314a6ffe, 0x900a, 0x101, 0x1, 0x80000, 0x7f, 0x6, 0xbf, 0x10001, 0x5, 0x63, 0x3, 0x5, 0x3, 0xe, 0xcc5, 0x2, 0x0, 0xc59, 0x0, 0xf6b, 0xffffffec, 0x6, 0x4, 0x8, 0xa60, 0x10001, 0x101, 0x69, 0x7, 0x20, 0xaa, 0xfffffffc, 0x6, 0x2fe7, 0x8, 0xe, 0x7, 0x401, 0x1, 0x7, 0x2, 0xd02, 0x1, 0x9, 0xfffff45b, 0x536a, 0x4, 0x5, 0x0, 0x6, 0x3, 0x3, 0x4, 0x1bd, 0x7, 0x1ace8112, 0x8, 0xf39, 0xf09, 0x6, 0x3, 0x3, 0x2, 0x1, 0xdd70, 0x400, 0x9, 0x4, 0x3, 0xa0, 0x10001, 0x6, 0x7, 0x80000000, 0x2, 0x5, 0x1ff, 0x0, 0xd, 0xffff42ad, 0x7284, 0xa, 0x9, 0x2, 0x8, 0x8, 0x0, 0x8, 0x3, 0x80, 0x8, 0x7, 0x8000, 0x9, 0xf9d, 0x1000, 0xe5f, 0x8fda, 0x3d, 0x6, 0x9, 0x7ff, 0x5, 0x400, 0x7, 0x2, 0x36400000, 0xfffffffa, 0x5, 0x0, 0xfffffdd9, 0x9, 0x3, 0x8, 0x6, 0x8, 0x2, 0x927d, 0x8, 0xd, 0x6, 0x1, 0x3, 0x889, 0x7f, 0x4, 0x9, 0x234, 0x10, 0x6, 0x8, 0xae, 0x8b63f69, 0x6, 0x6, 0x1ff, 0x6, 0x3, 0x99f, 0x9, 0x6, 0x4, 0x9, 0x4, 0x10000, 0x81, 0x1000, 0xf, 0x3, 0x8, 0x72c, 0x4, 0xa0, 0xbd3, 0x5, 0xffffffff, 0x9, 0x9, 0x3, 0x5, 0x5, 0x7, 0xe0, 0x4, 0x3, 0x400, 0x0, 0x10, 0x8, 0x0, 0xe42, 0x8001, 0x1, 0x100, 0x4, 0x2, 0x6, 0x6, 0x7, 0x80000001, 0x8, 0x8, 0x1, 0x7, 0x7, 0x1, 0x349, 0x7, 0x10000, 0x200, 0x400, 0xf6, 0x9, 0x7, 0x0, 0x2, 0x1, 0x7, 0x5, 0x2523, 0x1, 0x8001, 0x3, 0x1, 0xa6, 0x4, 0x0, 0x1, 0xffff, 0x1ff, 0xcac, 0x3af, 0x927, 0x7ff, 0x7, 0x0, 0x6b, 0x6, 0x2, 0x0, 0x4, 0x9, 0x9, 0x5, 0x5, 0x401, 0x56aa, 0x1, 0x5e, 0x2, 0x5, 0xd183, 0x1, 0x2, 0x3ff, 0x8, 0x8, 0x7, 0x9, 0xf0, 0x1, 0x6, 0x7de, 0xed4, 0x0, 0x2, 0x2, 0x5aa, 0x80, 0xc97, 0x2, 0x4, 0x8, 0x0, 0x4, 0xfffffff8, 0x10000, 0xfffffff7, 0x2, 0x3, 0x6, 0x7fffffff, 0x9, 0x3, 0x1ff, 0x0, 0x4, 0x9, 0x1, 0x2, 0x35, 0x0, 0x0, 0x5, 0x5667, 0x5, 0x2, 0x6, 0x10000, 0xa5, 0xf, 0x3, 0x7, 0xa5, 0x7, 0xa2d, 0x4, 0x7, 0x200, 0xa, 0x9, 0x46, 0x8001]})
r9 = mmap$KVM_VCPU(&(0x7f0000f5c000/0x4000)=nil, r0, 0x9, 0x4000010, r8, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r9, 0x20, &(0x7f0000002c00)="a36faa3ecdc846a2721d67d25c51616b791f5bc6cda53220", 0x0, 0x18)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000002c40)={0x7fff, 0x1})
ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3)

2m53.031809992s ago: executing program 3 (id=3707):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000001400)={0x2, 0x912, &(0x7f0000000340)="177906fe01444a067562376b6e9b88bbb75ae58e7be531b1409e683b3ddb152ed2ca015b8e2f35acdbdcc5c4ce76fe151d4d2a0b6be91b2499fc876d32408c8e281f0b634538f4c399dda653f4a473acc3ff876b071c30288885f9aedc6da60d2ecdeb076f5075383260d086e29687c79dd7949f21490c746ae8045db30f7059ed7cce0d3b32b5507e669afdc89b97c9a64b47", &(0x7f0000000400)="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", 0x93, 0x1000})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x9)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000002c0)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9c7442400f3130000c744240273ffffffc7442406000000000f0114240f3266ba410066b8f0a566efc7442400220100004b4424e000005000ff1c24", 0x5c}], 0xaaaaaaaaaaaaad2, 0x50, &(0x7f0000000040)=[@dstype3={0x7, 0x5}, @dstype3={0x7, 0x20000000005}], 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)

1m40.948955391s ago: executing program 35 (id=3707):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000001400)={0x2, 0x912, &(0x7f0000000340)="177906fe01444a067562376b6e9b88bbb75ae58e7be531b1409e683b3ddb152ed2ca015b8e2f35acdbdcc5c4ce76fe151d4d2a0b6be91b2499fc876d32408c8e281f0b634538f4c399dda653f4a473acc3ff876b071c30288885f9aedc6da60d2ecdeb076f5075383260d086e29687c79dd7949f21490c746ae8045db30f7059ed7cce0d3b32b5507e669afdc89b97c9a64b47", &(0x7f0000000400)="831ec04578444b07f9c1900dc184b4c32695e2c7990854dca9511317ac8f32d35fa2281d2c08c9fa62fbf903ab25c784bf6f5449322e79bfa0a65b2776d5784c158570fc036005f101d309f07fbdaaa39677cfafdbc613916f8098201179746bca424c407b19200ad8a24cf1c25506a1deb1d8e6aab9e6c0bb1f2b548a5529dcc86a1a720c6512638f56814693fefd019a9388169bf5087a7a6c682076af2c4b4ce45b31938ae794c0de535223e8558a8d8c125c9841899e8a0d8c58bd73baf16056dce2588e42eff745fa037d94e180a640d8384f7a9ca8bb65228625f18a61e5bb6a9a13e932195ff9be52b6f12f12cc038647e7be2f615b9841f8a5dd7249f35897df54e0ffbdf6d8cd9c2cabd47e4019e9dd2d8088771747defd21e679a939d8d8279f2c25cbad71f34e39da52408d4278c5abe3d19df0af912ddec9890079cbd78ece34c0c68b481fbf21f0d17249c6320e9ef4cc869783b9f3621fe7c3fc77ac2bf124015a8b4895d996f3d3b6fd33f0c9f99463ecf436dc6c1e59202fc892b81d30d4502e19e80fd1e03323da03dfb2f7b1d54fabc034943bbe1e120ab4a02780ce5ab1c547db9b8946d9d34fd62083023ef3689269f5ee38d6a04a206bc559aa9a48156c32a2879256beb804f7d6b9134dc62acbabaea0e091f8791331e6df40738d55b2d68e2f24e2b320bf0dc097305ee160302f7c47e95e22da4a3665ff0db51affbcf084b84d5bea15670c8c363e3249857269b9d7540833c805a6c99ee38c0aee2f854514c9059036efe26b38a9ad82c2ad934a4987ee5a235fb4f82b7c225ff241f7de2c603a1afb3e51f831728c97cf578f319367df262554910a0baa52eafbc54728907a7716e30e58df3f45334501abac9e5f4169c8c7335925511dd1c38fc6e7ee3a8891e6dee09e1cdbea4ca993f0d4750f86a65880385f74dcb558b7c7517fc92513f868c2a981844f0246e2eb2045dffbad03bb449d922360ff1c5ffd4134b5e6b18ddd4228d243ac04638008d18b5ef611e8809a816f1248c6796029b9212cf533df8ffa13a6bafc7a357b08d01e3fafa6d40efe6da469f22bba4576200e82cf6bd1b3ad68d749c1984e3fb98ac97cdc75c015db76bee86e8ecc75397db864bc55e9e9b36e457f02ee5d28b2a995a8cc39bb8ff21baa4d054c92df9b21a7519c00791d6cef623b40123b52c14eda39d6d23dad63ef97e9d786538b54c5305ccebf13b4a4666d7be8392bdb61130d2626b260f1c01ce63106de725910ae1c9fed981cbb095476d1eafd00a3618075791b19521ae758ab76aaaa1f0c6f1e38f434317677cbcaff92827aa9243e5fd438bd8733e02cbe212daf4127483c7769dbb891a0d67142d183ec5a937f4bf2781121050bae0c0abb8b61dcd9b4af22b99b2fd6450b5a9e61220afa9cc80ceaeeb668b352f299afb4cd3acbd5e6414fabbac9f57fa75ed58d286b301e23d8df16fdbaa50b1cd4192d31f35be064abeb2c500f3333791ad34c78fbbc55f641e42b59454d4d62fde55524bf757cb3db8937c5ccaeeddc4effdc417d642ef20fca9eef3afa225467a3556248f52c3b0eb1d2928632bc53146f7ccd270acfd8febd7f07b1d6f3dbb94b300c5e7443190ae75821ef2b4296e0a2881fdbb3613406a3f86527dcf33f1abd4da14e0d5df3e4585ea2d956334e593850dde93741ef64ff50cc5b14579ccc5cd40b3dd565a5ea858865b3349d16ef859d6073e28628f3e816c81d225a680aca6723a0be1d224632e0b39ab3ebe98eab269776ad866ca58497c921d52fc544ba133dd762b164198cb313c9611b149b1b3304d081aec107862fa667ccb1c445f1f8ed27888f1c650d95fcae48824d45a75dda3557dce935374a2362f7b3cefa89e6943e751c7fb06211218c24dc4876a39f529ff5f18583f9c8e66ca0bdec49f369cf6c38aaa4131e4d6d5a0caed0bc3eec16fa9734e5c5d82eaf08474898c9d258eb5cf4800955b6223b5c9abfa74affca32fbbb9df6c2a08f255baaba34b28af08d6c6e93fd56adf59465a1f95f2f7df88db48a5f1e41bf9135741703963df12128643cc296b5945b1e8b6ec8fb0339d8bc4468b0c6b8f8acae1713255d32d5b6a43fe63b97d71088046139dd63bc809c5221a1617fa3bbacfbccecced2413a22d14295b9f68bde78ccfb984dfa8f444c96b88187efc3eec4709afc4148d3bc48e245f8c9ea387062e73808a322061774e548ba07db0edd1eb701baf68f570032beb60e0b8b0cefd279f9a7030e6d5bacf08fdb3d29699e1879d4de1776f72a71da1e74dc32d42eb491dceb481bc1d61bd5008b5c83842a1b0712652882e9ea6fdf72dbfbdfd1f2283ee23bc0626c164a54a8b1ebc1ed81106889aafdbd8c9f2389a8776e7880fa655cd3488609348fcc6ef29b61a2c8f49c2f8f88f5610284e04182e1c56ed013521867316a1806babe49323414c154349b0df47f4a8147344636318881bbae111a9bd95aaa0500baf59157a01a423acf75b0e05479f8200a22eb5f7e9545d8015e8552ff3a280a92180b0884851df5dbaad4e052341957644f896b1e2772754b5478a5381330cd701dbcc5cb21bdd34e397f099270aded6e3a15a366dd4e0def90b96beda3853b7d98a86c3d7bb10fa3b9f34f286d48c881998353403f56b51db2e2daf0f3b2912a2f415bcc35e3b903d51c5e8db08d0cbac4425d8fa8c1901a26ca5095b36d2a47c4a5374fc431171b158a35960abbec52ab89c9c5319c24fea29c8d66f273602cf2c37f99fcf27248e1d1fc9034cffc9d5e38a69d4075c11562f73c3d58b2a0ee9bdbd8b7c78b46fec35a5fafca34eb5fa51b3eb33d6a787670f8a7b4269480116641f2ce7e445b3d367546948f5c90f1486200eb9e71ef3064db51d9b4a8761997d775bf9cd6056a36d39d569578192cba7d48cb1a3ab251fa3643a84e38532f2094f21ce5df6a21fa6c8cca95460683145ca20062f8cd5b529ab8e7f62d2e89c15cb704e5810abaea5da53abfe5c05d4edb3e2633068f8870b48b9d23fd8c15175205da3003457a8e4ddf1c38c66fda0d743a25b66d541beb0e2401b0b7a4819f0dfd656ab79eaed2288446250b6e5c057bb442dad021e9950f3239a4781798433a6407ee9a3b3d78767ba4dce99ed10610375bcbd12027dabebd44acf6a618725fc40220c49fdc1d755c65c0429c10ce0eb6d397997e6f3da5961f12364a36b34dcc29752bec88def9a3a471b334a49b0eb86147ff3fc1990abecc9ec4ec5c5f3bfd618e66668c5ff463473bb62d565a1ab83b2d6dea57829e04076e9c33d876ecb15d8c6e6e4d5eefb58e2a956c9966521d73d793f184bdd4c736d09601fc156cfdbd439dc8420b33ef31e01737507420da4c4abe8268403d5ce062ca77d869575fc34428e2395d5107c0b67a61dc9f82702c4da54e99f23385f24c05378d96d2405be28abc8d9af5a195af9d26df964273dbb378a62f673d1528cc6088070471b830f3ea74dbdde4379f816df9b11c967ba45da3b7ed2053676f576d14ce1362dd6c3f85d5f643384c6dd2b9b16b5acfee6cc4b0dfc6a76d0b10d2ea8961b6055d7b05aeb493fa733ca1dbff88f6bf7d12fdc69a2a8e246b609518d2df27671aa8b553ba472193969af39c9a614b9406d83dd64f7bc8839c31bcf9dba5c93132d17fc7736cadb2e14ece3c5afbd8f3b5a0efc704e5de4605a3db22aaa7d2db58209cb833d027fa036856936087495e16579b2e32cd2d1e5d0da3da5630cf27eadf77224f28b93cdd93f2597cf73155b1227afdf67add6fa1f956f90aa98271919e550cb7c749057efe1b3953894be939d3a354afe50f2853dd97c2dd27e73b4d47595cbd33918c0d78d50e8cbed7e24397ec368373e59069825a9c0e8310032271aba7a21d463aff6f9f35c74721424d8794da93a0c105683afc25763a507857345924625fb1ee2cb4301b41468edd6a48384c26984aa32cace119f298cc302484019801d7a205a0103c7fb7a4e6389f76748774e122df50db47e943b2d4aa5909f802752c993de001f1fe96eb73d7e806681845e3a953480161058790af26c0de161ab38cc4d8e9aa158e574f43e194ba689bf7f56a31b8cf061a7fbce6855c77e60195bf2d2181a5485908ac8be9e0260de40da7aa5840e5028e8c546e1e070faee86c43d8cc252f24eb65a410d48e0576e8fd3c841dccb5ceb13a4f9fb8e7f716401cf2f1421784bdaffa2e9c07169a9117de2573cee8edda9f8665272f4206db1419bcd136972a38d5feeb2293744fbf50f63c1079bff2bba56c54def483a9691e97213ab7a6fde99a4b56d193ec33e7d2ca91c7ef04548090a4494b00969a3c23c102752fdacc2e4e12a3b563abc9e2a450eff7f56c0f67aa9485b748150cb5f95c6b245b2bbead009aae0da499c6cda8e23bd30649f1d4dc87f8a17935630c17cdd9dd1c8feadc608e7d4f2d39bea5b04542b130387fc3e86e7eb75d89490d22e3188800ccab6ca17ccb51ed5d994d357d5d43c9533e9e24ffd1debeba60ed8051bb5a8ca60f215c8a654823bff6d6b2ce4b8ade700152cf93387f68f52bbdaab92437878623482e3884adb5108325490e4a104f4fba5f14e0c95586e78ebce14098615062db465796b8bbd951bc04d28ff72c7230ed23427f805cb432ca5b77183f428e77db2b0e2eb83e18c726fd1904a7498d943ec0c6c132911fdb458fa5065b1dd467d9630d4e7c2c8e9882d1bf97a692deb135683cd223a7d7d5567085c29629f7650c452ef2b5c805d0a9e749991d708c9527e3243beb2665d9f3ea2f07942affba790c162316d50cc16eaf32af177c0ac87103cff95aae74b23a56a687e747514075fe7a8c55b656d4fdd0810305f7d8dc1495af545075abf6559cc361169b24cb443c350f73a9c6c523793263fa0fa38e0814a9ed398b0802d5118a3e922373898690aa1ed61a13225dc6b49f2456ef578d3ec8eb1f09092cf685bb093b6b92f4981467c16bb236adf473ca89eaf0a235656ad2ab04d6c2e8ffa5701567c352a254d988e68f55ebb9a9b358b39c5c0e43458c655ecd71250fdd671a0cf5ea611252eebaf45d3aa8b96c5d6eca792a06c24278e97276ab6e957497eb7c68dc2a08e90b6728f4b61c2694a766c2d20fe9e920b1b183d1a94baf3ac87e6bd4d4178a7fc22e7a0d7f1298c0c6b5c1ce832e543b09b15f6f176ba7fe917035244757d6f7c01672aebd593d94dfa6957fddb461a71f93ff449ecc628af62dec286123968914305d62f50f71c4fe7fff341de5159f21c32db1ecdf29d13a460b41169f8d6b68a3263c66c5c6a78556ccf0c25cf34c6efe28d534a45d3080a9cd2724239bc32ebb933d0d66a37a2c02194c05bed093bc13389f2a6d969a75c486e37797b257c2f437f42796b9bfb273bba0463453f4236cc166f84a1676536d7dea23e2328c74c5e90b8381a8352675651c45391b7166ce844ae42136764d9d062cc98de209990fa12d50fc2a994626e2a8db0c182b2c8ae784a8e9e6810bbfa6046187c4152fe06ac1e97172ac53cc26b46169564a4583610c2c5a582766cc10dfa3eb08b848582d8bfeafee79bd2816c703f88c3f33923a1a8592b0ad1aa23cbf7742c0a6d61248c8496e7649d4904a5db5f74b7aae501b84c7ce025bf406132a34d75e22b544da03beae4dd904ea5e874bdf10913a62fdd4b118001d4d0d3e144102d1f2c7fa54df2c08a22db184afc50001373172830c09e803bc403e8d19b571d1030dc8cc86e265", 0x93, 0x1000})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x9)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000002c0)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9c7442400f3130000c744240273ffffffc7442406000000000f0114240f3266ba410066b8f0a566efc7442400220100004b4424e000005000ff1c24", 0x5c}], 0xaaaaaaaaaaaaad2, 0x50, &(0x7f0000000040)=[@dstype3={0x7, 0x5}, @dstype3={0x7, 0x20000000005}], 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)

1m40.948812816s ago: executing program 36 (id=3704):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000015000/0x1000)=nil, r1, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd1)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00003f1000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="640f0131410f017500b951020000b800000080ba000000000f308fe9e0911bc4e17173f10fc441455ecf66baf80cb8523bae87ef66bafc0c66b80a0066ef7a086666410f388216410f70c1", 0x4b}], 0x1, 0x34, &(0x7f00000000c0)=[@cstype3={0x5, 0xc}], 0x1)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x1, &(0x7f00000000c0)=0x9})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[@cpuid={0x64, 0x18, {0x8, 0x40}}, @wr_drn={0x68, 0x20, {0x3, 0x30}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x2f1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x6dbc}}, @out_dx={0x6a, 0x28, {0xdf40, 0x7, 0x5}}, @out_dx={0x6a, 0x28, {0xfb92, 0x0, 0xeef}}, @set_irq_handler={0xc8, 0x20, {0xf3}}, @nested_load_code={0x12e, 0x70, {0x3, "c4a192539f7400000048b800300000000000000f23c80f21f8350c00b0000f23f8430f090f01d1676540f79061000000b92c0b0000b814000000ba000000000f30c4e253f5400066b862008ec0da980000008065430faefc"}}], 0x168})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
munmap(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})

1m40.948743798s ago: executing program 37 (id=3705):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_PTP_KVM(r4, 0x4068aea3, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="f30f0966b99d00004066b88d00000066ba000000000f300f42ddea7c00f000eedfd166b9800000c00f326635002000000f300f01cf66b99700004066b8ba71f05e66ba000000000f306766c7442400080000006766c7442402e2d200006766c744240600000000670f011c24", 0x6c}], 0x1, 0x50, &(0x7f00000000c0), 0x0)

2.585374062s ago: executing program 6 (id=4335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x14000})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.380450511s ago: executing program 6 (id=4337):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="450f1a10e4420f01cfbe202061134610161666baf80cb8d4c1c788ef66bafc0cec0f017300c48203f63c4a3e66460f388230bc0f12f2ad0f3266efc744240022010000365b424f1501c201c224", 0x4d}], 0x1, 0x4, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_XSAVE(r10, 0x5000aea5, &(0x7f0000000a00)={[0x7, 0x4, 0x3, 0x1, 0x9, 0x8, 0x9, 0x0, 0x5, 0x2, 0x7ff, 0xc9, 0x8, 0x5, 0x1000, 0x1534, 0x2, 0x200, 0x1, 0x111, 0x7, 0xfffffff9, 0xfffffffb, 0x2, 0xe34, 0x9, 0x6, 0xfde, 0x7, 0x3, 0x9, 0x400, 0xffffff00, 0x4, 0x6, 0xee, 0x4, 0xaf, 0xf, 0x3834, 0x3, 0x2347, 0xedf, 0x6c0, 0x0, 0x1, 0x919, 0x7, 0x6, 0x6, 0x9, 0x1, 0x3ff, 0x5, 0x7, 0xd4, 0x6, 0xe, 0x1, 0x5, 0x81, 0x7ff, 0x0, 0x2, 0xfffeffff, 0x6, 0x3, 0x2, 0x9, 0xc79, 0x7, 0x7, 0xffffffff, 0x6, 0x400, 0x9, 0x5, 0xb25c, 0x9, 0x8, 0x7, 0x2, 0x7, 0x2, 0x7, 0xffff, 0x6, 0x80, 0xbb4d00, 0x2, 0x9, 0x9, 0x710, 0x18c, 0x3530, 0x9, 0xa462, 0x1, 0x81, 0x0, 0x3, 0x7, 0x1b6a, 0x3, 0x4850, 0x4, 0x1, 0xfff, 0x6, 0xffff4693, 0xb, 0x2, 0xf, 0x2e2, 0x4, 0x7, 0xc4ec, 0x5, 0x7fff, 0x0, 0x0, 0x2, 0x7fff, 0x6, 0x0, 0x6, 0x7, 0x5, 0x5, 0x0, 0x7, 0x58, 0x7fffffff, 0x9, 0x9, 0x0, 0x5a, 0x8000, 0x0, 0x7fffffff, 0x100, 0x10000, 0x7, 0xfffffbff, 0xf1d, 0x98, 0x800, 0x6, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x0, 0x400, 0xdc2, 0xff, 0x5, 0x221f, 0x80000000, 0x8, 0x5, 0x80, 0x40, 0x80000000, 0xe62, 0x2, 0x4, 0x4, 0x8, 0x7, 0x8, 0x7fff, 0x9, 0x3, 0xc1c, 0x5, 0x5, 0x3d17, 0x2, 0x1000, 0x6, 0x6, 0x2, 0xffffffff, 0x2, 0x5637252, 0x44, 0xabb7, 0x0, 0x0, 0x10000, 0x3, 0x3, 0x3, 0x7f, 0x3ff, 0xfffffe00, 0xfffffff7, 0x8, 0x3, 0xe, 0xffffffff, 0x1, 0xd1, 0x3ff, 0x449, 0x2, 0xf, 0x4, 0x10001, 0x8, 0x1, 0x6, 0x2, 0x21, 0x7, 0x857, 0x6, 0xe31, 0xf08e, 0x7, 0x2ff, 0x2, 0x3, 0x40, 0xa9, 0x6, 0x2, 0x9591, 0x60, 0x3b172417, 0x8, 0x5, 0x4, 0x8, 0x3, 0x10001, 0x4, 0x5, 0xa9b8, 0x7fffffff, 0x7, 0x4, 0x79fb, 0x7, 0x4, 0x5, 0x4, 0x80000001, 0xe7c7, 0xffffffff, 0x1, 0xa, 0x3f8, 0x0, 0x1b, 0x9, 0x80, 0x3660053f, 0x1, 0xae, 0x3, 0x80, 0x3, 0x40, 0x4, 0x3, 0xfffffffe, 0x1, 0x2, 0xb, 0x2ee1, 0x22, 0x81, 0x10000, 0xfffffffa, 0x1, 0xf09b, 0xdfa, 0xc, 0xff, 0x4, 0x8, 0x10000, 0x7, 0xa, 0x2f, 0x1, 0x7, 0x0, 0x8, 0x2, 0x10001, 0x1, 0x224, 0x6, 0x6, 0x4, 0x587, 0x4, 0x5, 0xff, 0x5, 0x1, 0x40, 0x7, 0x5, 0x1c91c047, 0x1ff, 0x1, 0x8, 0x0, 0xfc, 0x0, 0x1923, 0x3, 0xffff, 0x0, 0x800, 0x4, 0xfff, 0x4123, 0x6, 0x9365, 0x8000000, 0x5, 0xe, 0x6, 0x400, 0x2, 0x81, 0x10000, 0x5, 0x81, 0x8001, 0x400, 0x0, 0x9b, 0x40, 0x5, 0x4, 0x0, 0x6, 0x7ff, 0x2, 0x5, 0xbb, 0x84, 0x0, 0x8, 0xfffffffa, 0xef, 0x9, 0xff, 0x95c4, 0x3d60bf93, 0x1, 0x6, 0xc, 0x2, 0x88, 0xf, 0x0, 0xb2, 0x7, 0x101, 0x2, 0x6, 0x8999, 0x7, 0xda, 0x8, 0x0, 0x4, 0x5f, 0x73, 0xd44, 0xffffffc0, 0x7, 0x7fff, 0x193, 0x5, 0xb51b, 0x7f, 0x7, 0x2, 0xffff, 0x7, 0x3, 0x4, 0x2c44328f, 0x6, 0xfffff4dc, 0x4, 0xa206e2, 0x0, 0x5, 0x4, 0x3, 0x3, 0x1, 0x7ff, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7394, 0x7, 0x3, 0x7fffffff, 0x7fffffff, 0xe9, 0x80000000, 0x1000, 0x10000, 0x7, 0x1, 0x400, 0x2, 0x0, 0x1ff, 0x0, 0x4464ee49, 0x9b, 0xd, 0x14000, 0xe, 0x4, 0x5510, 0x4, 0x7, 0xffffff40, 0x3, 0x0, 0x0, 0x7, 0x532, 0x98d, 0x10001, 0x5, 0x6, 0x7, 0x80000000, 0xfff, 0x0, 0x7fffffff, 0x5, 0x0, 0x8, 0x9, 0x8, 0x1, 0x6, 0x400, 0x1e6, 0x2, 0x2, 0x6, 0xffffffff, 0x6, 0x3, 0xc, 0x0, 0x6, 0x4, 0x8, 0x3c, 0xe, 0x8, 0xffffffff, 0x8, 0x7, 0x6, 0xe6, 0x1, 0x1, 0x6, 0x0, 0x9, 0x101, 0x4, 0x0, 0x4, 0x1ff, 0x7, 0x0, 0x3, 0x5, 0x5, 0x0, 0x9, 0x1, 0x8, 0x7ff, 0xfffffff7, 0x2, 0x100, 0x6, 0x9, 0x9, 0x8, 0x9, 0x2000000, 0x100, 0x400, 0x807, 0x4, 0x3, 0x8, 0x3, 0x5, 0x2, 0x23, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0xc8, 0x4, 0xfffffffb, 0x81, 0x3, 0x0, 0x9c43, 0x2, 0x4, 0x4, 0xffff, 0x6, 0x1, 0xff, 0xf22, 0x9, 0x101, 0xecb1, 0x1000, 0xf0d, 0x2, 0x2, 0x397, 0x2, 0x10001, 0x2, 0x1, 0xfffff800, 0x6, 0x5, 0x8, 0x6, 0x10001, 0x5, 0xeaad, 0x1, 0x4, 0x7fff, 0x971f, 0x200, 0x5, 0xc1, 0x0, 0x6, 0xfffffff8, 0xb, 0x7b5, 0x7512, 0xfffffffa, 0x5, 0x401, 0x7, 0x9, 0x3ff, 0xfffffffe, 0xfffffffc, 0xffffd751, 0xfffff001, 0x2, 0x0, 0x1, 0x5, 0x5, 0x4, 0x1, 0x4, 0x9, 0xe, 0xfffffffa, 0x5, 0x13c5, 0x2, 0x2, 0x5, 0x7f, 0x1ff, 0x800, 0x4, 0x7, 0xa, 0x1, 0x0, 0x5, 0x3, 0x7, 0xbf0f, 0x5, 0x3f, 0x3, 0x82e4, 0x8, 0x8, 0x8, 0x27e, 0x5, 0x81, 0x5, 0x1, 0x2, 0x2, 0x8000, 0x7, 0x3, 0x0, 0x7, 0x5, 0x6, 0x215, 0x9, 0x1000, 0x9, 0x3a5a, 0x8, 0x7f, 0x80000001, 0x1, 0x2, 0x4, 0x1, 0xffffffff, 0x9, 0x5f, 0x9, 0x4, 0xb237, 0x10, 0x4, 0x3, 0xf992, 0x5, 0x2, 0x10, 0x7, 0xe, 0x2, 0x101, 0x0, 0x3, 0x4, 0xff, 0x9a7, 0x7, 0x8001, 0x1e75, 0x6, 0x3, 0x51, 0x5, 0x10000, 0x5, 0x4, 0x9, 0x10001, 0x80000000, 0x6, 0xb3e, 0x2, 0x1, 0x6, 0x2, 0xd4c2, 0x2a, 0x3219, 0x80000001, 0x1, 0x100, 0x6, 0x6, 0x3a5, 0x4, 0x4, 0x4, 0x7, 0x2, 0x3, 0x200, 0x30, 0xccc, 0x7fffffff, 0xc, 0xfff, 0x8, 0x7, 0x6, 0x1ff, 0xef65, 0xde1, 0x10001, 0x5, 0x8, 0x3, 0xdf9, 0x0, 0x8, 0xf0, 0x1, 0xb1, 0x5, 0xffffff00, 0x1, 0x7, 0x0, 0x2, 0x8, 0x4, 0xfffffffd, 0x86, 0x1000, 0x3, 0xffff01bb, 0x3c7235d1, 0x1, 0x1, 0x10001, 0x81, 0x7ff800, 0x2, 0x95, 0x8, 0x1, 0xeee, 0xffffffff, 0xd, 0x8, 0x0, 0x9, 0x9, 0x6, 0xff, 0x0, 0x6, 0x7, 0x9, 0x5, 0x81e, 0xc7e8, 0x6, 0xcb3, 0x7, 0x618b, 0xe4, 0xffffff47, 0x100, 0x101, 0x7fff, 0x1, 0xbe1, 0x4, 0xa, 0x60, 0x772b, 0x1, 0x7, 0x2, 0x7, 0x8, 0x295, 0x101, 0xfffff187, 0x7, 0x0, 0x3, 0x1, 0x1, 0x200, 0x6, 0xfffffffc, 0x7, 0x100, 0x401, 0xf3, 0x3, 0xfffffffe, 0xfffffffc, 0x101, 0xe2a7, 0x7f, 0x4, 0x6, 0x10001, 0xffffff7f, 0x7ab, 0x0, 0xa65, 0x3, 0x9, 0x9, 0x1, 0x6, 0x8, 0xb5a, 0x4, 0xffff, 0x10, 0x4, 0x1, 0xe, 0x5, 0x2, 0x225, 0x6, 0x2, 0x0, 0x9, 0xc, 0x5, 0x8, 0x2, 0x3, 0x6, 0x1, 0x200, 0x7, 0x5, 0x800, 0x18d25eb7, 0xfff, 0x8, 0x6, 0x3, 0xd4, 0x81, 0x6, 0x0, 0x3, 0x5, 0x1, 0x814a, 0x3, 0xa, 0x40, 0x5341, 0x1, 0x9, 0x1000, 0xfa51, 0x9, 0x8e2, 0xe, 0x3ff, 0x6, 0x6, 0x6, 0xb, 0xcafb, 0x10, 0x101, 0x0, 0x9, 0x6, 0x8, 0x7, 0x9, 0x3, 0x6ac5, 0xfffffff8, 0x8, 0xdb, 0x2, 0xfffff800, 0x1, 0xa30, 0x4, 0xfa4, 0xfffffffa, 0x8, 0xf5, 0xce5, 0xf50a, 0xf, 0x5, 0xbedd, 0x8, 0x8, 0x0, 0x1, 0xd, 0x0, 0x9d, 0x10, 0x7, 0x1, 0x1a, 0xffff, 0x2, 0xf3, 0x800, 0x5, 0x4, 0xff, 0xffff7fe1, 0x4, 0xff, 0xfffffffc, 0x7f, 0x5, 0x6, 0x9, 0x6, 0x7, 0x101, 0x1, 0x72, 0xf87, 0x2, 0x1, 0x101, 0x9, 0x1, 0x8001, 0x1ff, 0x9, 0x8, 0x16, 0x0, 0x5, 0x5, 0x3, 0x0, 0xffff84a7, 0x4, 0x7, 0xffffc000, 0x4, 0x401, 0xc, 0xf, 0x0, 0x0, 0x400, 0x1, 0xfffff35d, 0x3, 0x1, 0x1de26530, 0x7fff, 0x9, 0x8000, 0x1a, 0x0, 0x0, 0x7, 0x7ff, 0x101, 0x85, 0x9, 0xcab, 0x2, 0x3, 0x3ff, 0x1, 0x5, 0x6, 0x101, 0x2, 0x9, 0x4, 0xc3c, 0x3, 0xc40, 0x401, 0x0, 0xacc, 0x0, 0xfff, 0x6, 0x9, 0xfffffff9, 0x6, 0x9, 0x2, 0x101, 0x9, 0x2, 0x97f2, 0x1, 0x8, 0x4, 0x400, 0x7, 0x8, 0x8, 0x6, 0x6, 0x0, 0x4, 0x10000, 0x1, 0x0, 0x2, 0x5e30, 0x1, 0xb, 0xb, 0x6b5, 0x84, 0x4, 0x7, 0x7fffffff, 0x10001, 0xa, 0xa00]})
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000300)={0x0, 0x964, &(0x7f0000000140)="7cc24ab5a9a7156eb8af675b0c94ecc110d0ea4d3d2b4779f11af17ee7b886528b3fe3499e3dae5790c37eb51235cb9f48a8afe07398c3b42bd73ea0f0ee315f110175519b89a20390a085790632855ebca6beb401a7c0426215df7d1f5367d8b457d5ffd73386c5051434d39b148804d2aeb71e4b116d6211b289c2252f6d67f885a60ce5a566ea7e5efc3df0f2d2fe4506e25e38fd838ae68dc7d41a0ab815158cb5bb233b782693f1419b13f77beb380c3a976205a7058e1ec605c6f594e5ed32dd68e581a03a6bfa8c8cae4c9f8960470b6ca3d5393a81437a49e4e3", &(0x7f0000000240)="b95161f5d9dcb0bd93aa87d3476722b4d35ae7c41c5cd707caa5e73129fd243ff1af450cd84dcca7768f5b3b00071a25938528a9571a9469babdec573c5b2e35931f454fb03958f979df35727d2736edf6c409b9ccebc90beab10a9d84f31ff882345498bbe08f7368a0d733a759bee8ebad57435dc4a13b591500069318d6fbeac826720937b00a960f4f9c235f5cbdbc2329da134e1617c9a4f6127e1c3e8fc6e98d7bc92cc137b4281effbecf79e7363d751e19692b", 0xde, 0xb7})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="660f300f080f017feaba4000ed66b9320200000f32ba6100b80e00ef660f3801ce0f229767260f01cf66b9800000c00f326635000800000f30", 0x39}], 0x1, 0x72, &(0x7f0000000080), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x53d})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$KVM_SET_VAPIC_ADDR(r13, 0x4008ae93, &(0x7f0000000200)=0xffff1000)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x29d, 0x0, 0x5}, {0x261, 0x0, 0x1}, {0xb84, 0x0, 0x5}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x4b}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0xbba, 0x0, 0x1}, {0xafd, 0x0, 0xb}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.998405905s ago: executing program 6 (id=4342):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
munmap(&(0x7f0000016000/0x1000)=nil, 0x1000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f30fc7727566b91502000066b80060000066ba000000000f30360f07660f3881a0af6366b9930800000f32f26f66b9a40300000f320f01f5dee6f32e3d0000", 0x3f}], 0x1, 0x40, &(0x7f0000000040)=[@cr4={0x1, 0x1}], 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0xd000, 0xa000})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r7, 0xf, 0x11, r8, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="d9fe66ba4200ed0fc77a0c3e0f189000e000000f615000b9820100000f32b82b92b15b0f23d80f21f835c00000400f23f80f0666baf80cb85efe868bef66bafc0c66b8147a66efea080000007400", 0x4e}], 0x1, 0x40, &(0x7f0000000040)=[@flags={0x3, 0x25054}, @cstype0={0x4, 0xd}], 0x2)

1.80988874s ago: executing program 8 (id=4344):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b911040000b814000000ba000000000f30c4c1addff00f1eae00480000c4e3fd0010b33626260fc79a0f0000000f22a13e0ff51f8075c873262e0f01cb0f01ca", 0x40}], 0x1, 0x0, &(0x7f00000000c0)=[@dstype0={0x6, 0xc}, @cstype0={0x4, 0x9}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200), 0x0) (async)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.560853428s ago: executing program 7 (id=4345):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x30000, 0x2000}) (async)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0x8, 0x3, 0x3}) (async, rerun: 64)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (rerun: 64)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f0000001d80)={0xd5, 0x0, 0x9}) (async, rerun: 64)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64)
syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="660f300f080f017feaba4000ed66b9320200000f32ba6100b80e00ef660f3801ce0f229767260f01cf66b9800000c00f326635000800000f30", 0x39}], 0x1, 0x52, &(0x7f0000000080), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (rerun: 64)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x8c0}) (async)
ioctl$KVM_NMI(r8, 0xae9a)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17a, 0x0, 0x8f7}]}) (async)
r14 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r14, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f00000001c0), 0x0) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0)

1.560587188s ago: executing program 8 (id=4346):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x1000, &(0x7f000000f000/0x1000)=nil}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000002c0)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x7, 0x5, 0xe962, 0xc}, {0x80000000, 0xe9, 0x3, 0x2, 0xf, 0x8, 0x8}, {0x80000019, 0x3a, 0x1, 0x8, 0x5, 0x3, 0x1}, {0x40000000, 0xea6, 0x1, 0x8, 0xd8f, 0x80, 0x1}, {0x2, 0xb667, 0x3, 0x40, 0x1, 0x6, 0x2}]})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) (async)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000240)={0xdb, 0x0, 0x24}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000000c0)=@riscv64_v={0x8030000009000019, &(0x7f00000001c0)=0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f1a10e442d537be2020611310c941ac0f0173000f5864a907b8010000000f01d93e66460f388230bc0f12f2ad66b8f0a566efc74424002201000036420f01c2ff1c24", 0x44}], 0x1, 0x4, &(0x7f0000000040), 0x0)

1.370925098s ago: executing program 8 (id=4347):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
eventfd2(0x8, 0x801)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
close(r5)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)

1.179500314s ago: executing program 7 (id=4348):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) (async, rerun: 32)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 32)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="26460f01efc441c9e3c1660f38825600c4c3cd48680e6066b8a1008ed866ba4100b801000000ef450f380296090000000fc79908000000c401fff0041a66ba610066b8e1b766ef", 0x47}], 0x1, 0x27, &(0x7f00000000c0), 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0xfa00}}, @wr_crn={0x67, 0x20, {0x4, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0xa9}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}], 0xc8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async)
ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000240)) (async)
eventfd2(0x8, 0x80000) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) (rerun: 32)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0x1000, 0x9, 0x96, 0x4, 0x0, [{0xb, 0x5, 0x3}, {0x5, 0x4, 0xd, '\x00', 0x7}, {0x4, 0x32, 0x3, '\x00', 0x10}, {0x4, 0x63, 0x6, '\x00', 0xfb}, {0x7f, 0x2f, 0x44, '\x00', 0x8}, {0x0, 0xc, 0x2, '\x00', 0xc}, {0x5, 0x9, 0x2}, {0x7, 0x3, 0x5, '\x00', 0x5b}, {0xf7, 0x0, 0x80, '\x00', 0x25}, {0x7, 0xe, 0x7, '\x00', 0x6}, {0xd, 0x8, 0xfc, '\x00', 0x5}, {0xf, 0x6b, 0x7, '\x00', 0x3}, {0x4, 0x21, 0x5a, '\x00', 0x5}, {0xa, 0xfb, 0xb5, '\x00', 0x6}, {0x9, 0x8, 0x1, '\x00', 0x1}, {0x4, 0xf0, 0x7, '\x00', 0x2}, {0x80, 0x2, 0x5, '\x00', 0x3}, {0x7, 0x80, 0x2, '\x00', 0x8}, {0x9, 0xd, 0x8, '\x00', 0x9}, {0x1, 0xa7, 0x3}, {0x98, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x7, 0x8, '\x00', 0x1d}, {0x7, 0x2, 0x4, '\x00', 0x87}, {0x8, 0x3, 0xd, '\x00', 0x1}]}})
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000500)={"2261c0bf964b70f682094c05c715e217722a4ee17c8b1785bc51f560dffc3dfb539012fa41bbf8c5d83e38f529eaec70a8f6df56f624e0dfb863fb310974417b732e22eb4b691536602d27c5c10c10a6df17234a57ed58416f447e3c66f5d990421fe5dfb465b4960bc77a54e37d33b20df8089003edd795df3b7e1cfb42056b16bbe50057c34ecf4dcf40a270d8b8608bafe4b5d65dbeb79fa74a4be6effec704bf8dff7f9fe7d67576c196af7f48fbcc240c835366e46a00d181397ceb86b3f3e18213e13dca822f64365ba6952895b6d73ba91c363e02fd03eab10d960b436c4bc016a2fb60621a6bcbde2b7fb959df51bfbe92a889d399cdfb8c8a1a5e5134cc515b6809db01537a1c1d646f2796184d46711ef48280d877c604436b171b58611513de71791705b60748c07b4345cd4f28fdaa4bfd25d06e6b9b5c86cfe680ea1bdd021da154937501fd12774da02ae5672f5c70e159bd34a9ce84616b8ff2b46ffa393f2dee4a2986014670231607af9914964357e6a4254578371191516b7b45561ee56177b9bb735ff589e50496897e385c1c5a39f03ba99fc13cad9710d1083057d71b157c8d816d15118f9d6498e4eec3fa84c9d731a39a588b57e35592e9063014a0c1e5878027ef4793f83f820606705490c6300be6bcc65a86cba0e8e6773ea80982da18ec5c217367cb6a20b750de1311647a0e58452be08cfe0727b9a0817cb10239f7026319d7725fabbf234c22022e09eb0edc0587f08c5c9a0021f42d0ef77e9d6a108c7a73c77af89bbd0b3cb74f9b1ba11f1fd179f3c474e0bd2214774f4f3b92325dd36b0b5703abd31f31e48868a38db6c2f1c69c6f02eaa4fe7bcc676462093970e46778deb94096ec8550c5ea3f3f8965fd836b77a61aa9dbcf8f093024dc1b6f62248139474bd13c7bfec519dab4ed7cd437055933b974caa17253bb6717006aabd2e28dae341c5f1db0188b5afbcae862efa2d2bc4978995478919090528687188b3e64dc5e23edf307a980fd63a47b69f4b2aab425825ec9bf24de9570ae56957fba127b859ebcd4fd5fa82a2564d24b1f3b6c8af72037f0c6ea86da3ca408c573dc592314ab0d0666e6b1d4ba307e4e9f8a65412ed2048aec855e6e216a829aaf864334d6a93e2b6b10f582881c1e2285b633c6b8b260069c1a6907e7804a9f8ad2d315339f4fcb9e4be91d371ebc7831bc3f2455063b290ce5dbe3bfaa1a31195cb4bc485bc2f3fd4c3fdb280e7ddcfc82d13fcf54745eff67caa046884ae140c938c7cf175426cdb4d99f907878f5320b01236228d45a1d53588edcb2fff421d82f3e9ae8d13b83cb10ef11e685cb1761d5411e2e559f4b9e62b5e1fc10588605aa82565d0fddac5e35b5d6cabe98a9dca9df21b441d2547f623b71c39a054ef94833335ddf7b24f9141a3e1070924216cb"}) (async, rerun: 32)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async, rerun: 32)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000900)) (async)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0xd4, 0xb, 0x0, 0xe, 0x5, 0x9, 0x2, 0xab, 0x10, 0xe, 0x18, 0x9, 0x9, 0xea, 0x0, 0x3}}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async)
r6 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3f)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000c00)={0x1, 0x0, [{0x980, 0x0, 0x5}]}) (async)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000c80)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000c40)=0x4})
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000cc0)={0x3, 0x0, &(0x7f0000d69000/0x4000)=nil})
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000d00)={0x1c, 0x1})
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000d40)={0x0, 0x0, @pic={0x53, 0x9, 0xd, 0x6, 0xd, 0x5, 0x9, 0x1, 0x72, 0x5, 0x1, 0xfc, 0x1, 0x8, 0x9, 0x9}}) (async)
ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x10001)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000f80)) (async, rerun: 32)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001000)={0x1, 0x0, [{0xb6a, 0x0, 0x3}]}) (async, rerun: 64)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001040)={0x1, 0x0, @pic={0x80, 0xf0, 0x6, 0x68, 0x0, 0x80, 0x55, 0x7f, 0x7, 0xeb, 0xd1, 0x5, 0x80, 0x4, 0x80, 0xe}}) (rerun: 64)

1.112371198s ago: executing program 8 (id=4349):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000083e000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="0be266410f13182e410fc79d00400000c744240001000000c7442402bf000000c7442406000000000f0114242e410f01f8450fc72866baf80cb83b509e86ef66bafc0cec0f017ba4c744240024000000c744240220020000ff2c2448b8000000000080000066430f3803300f21f83503000f000f23f8", 0x76}], 0x1, 0x68, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.112162802s ago: executing program 7 (id=4350):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44e840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000500)={[0x26000, 0x26000, 0xdddd0000, 0x5000], 0x1, 0x40, 0x3})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000340)={0xb, 0x0, [{0x7, 0xcdf, 0x2, 0xffffffff, 0x8, 0x8001, 0xffffffff}, {0x80000008, 0xfff, 0x0, 0x7, 0x200, 0xc, 0xfffeffff}, {0xd, 0x4, 0x6, 0x8, 0x7, 0x1, 0x80}, {0xd, 0x7f, 0x4, 0x100, 0x2, 0x200, 0x80000000}, {0x80000008, 0x1, 0x0, 0x8, 0x7, 0xe7, 0xe64}, {0x1, 0x3ff, 0x2, 0x9, 0x9, 0x7ff, 0x141}, {0x80000001, 0x9788, 0x2, 0x2, 0x83e, 0x5, 0x100}, {0x40000001, 0xfffffffd, 0x6, 0x3, 0x81, 0x4, 0x49}, {0x3362d8e8e4e6c280, 0x4000, 0x0, 0x852, 0x80, 0xd, 0x5}, {0x4, 0x3, 0x6, 0xff, 0x76b6, 0x538, 0x3}, {0x80000001, 0xcf23, 0x0, 0x7fff, 0x8, 0x5, 0x5}]})
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04)
r15 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r14, 0x8, 0x11, r15, 0x0)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r16 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_SREGS2(r16, 0x4140aecd, &(0x7f00000001c0)={{0xd000, 0xc000, 0x1f, 0xfd, 0xa1, 0x5, 0x80, 0x9c, 0x3, 0x3, 0x6, 0x5}, {0xeeef0000, 0x9000, 0x0, 0xcb, 0x8, 0x8, 0xf8, 0x0, 0xfd, 0x40, 0x2, 0x9b}, {0xffffffff, 0x58000, 0xb, 0x5, 0x0, 0x78, 0x2, 0x81, 0x1d, 0xf, 0x7, 0xf3}, {0x4000, 0x6000, 0xb, 0x5, 0x8, 0x7, 0xb, 0x9, 0x4f, 0x2, 0x3, 0x7}, {0xf000, 0x8080000, 0xa, 0x3, 0xae, 0x4, 0xc, 0x5, 0x4, 0x4, 0x80}, {0x1, 0x4, 0xf, 0x6, 0x6, 0x1a, 0x5a, 0x40, 0x10, 0xb0, 0x6, 0xa}, {0x70000, 0x26000, 0x10, 0xf7, 0x4, 0x8a, 0x6, 0x30, 0x2, 0x8, 0x25, 0x1}, {0xfec00000, 0x0, 0x9, 0x40, 0x1, 0x4, 0x4, 0xf4, 0x4, 0xfb, 0x2, 0x2}, {0xd000, 0x42}, {0x50000, 0x132d}, 0xc0040002, 0x0, 0x3000, 0x20, 0x4, 0x100, 0x6000, 0x0, [0xa15, 0x7c4d, 0xffffffffffffffff, 0x2]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x8, 0x0, [{0x4b564d01, 0x0, 0x7ff}, {0x4b564d04, 0x0, 0x2a}, {0x400000b7}, {0x870, 0x0, 0x8}, {0xb5b, 0x0, 0x6}, {0x65b, 0x0, 0x1}, {0xa7e, 0x0, 0x6a87}, {0xbd5, 0x0, 0x7}]})

920.642932ms ago: executing program 8 (id=4351):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000014000/0x400000)=nil)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000324000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="660ffb8102322e662e660f38f0750b0f540f830ec800d166b95f0a000066b8f500000066ba000000000f30f0fe040f23730f78490ab8c0048ec80f01cf", 0x3d}], 0x1, 0x40, &(0x7f0000000080), 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0x1, 0x40, &(0x7f00000001c0), 0x0)

750.895241ms ago: executing program 7 (id=4352):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="f0ff8c043b9a4cd9b00065f20f5d94e97bba4300ec6635000100000f22e00f01c326f0811f00803365170f1cad0000baa000b94e260b6a0b6a0d01cb38", 0x3d}], 0x1, 0x1, &(0x7f0000000080)=[@flags={0x3, 0x80401}, @cstype3={0x5, 0x3}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

669.585487ms ago: executing program 8 (id=4353):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="48b80058000000000000f26736360f0936662e0f01f835c00000a00f23f865450f01c5b805000000c4a289926cba0b0f01d966b8c2000f00d8f045f61b670f60ec460f8a006c0000f3470f09c44391793500800000f82e67d0dced", 0x5b}], 0x1, 0x40, &(0x7f0000000140), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x7})
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x84f, 0x0, 0x134e}, {0x327, 0x0, 0xffff}, {0xbad, 0x0, 0x1}, {0x0, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xe000, 0x8000000, 0x35c, 0x0, 0x10000})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

669.191898ms ago: executing program 6 (id=4354):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x6666666666669d0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8080, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8080, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="dbe19aa3381a000f01c264660f71f5f59aa5c64d000f0626f3ab0f20c06635000001000f22c0b883008ed066668274cf00"}], 0x1, 0x40, &(0x7f00000000c0)=[@flags], 0x3)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2) (async)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000240)="0f23dd640f01d566b9420a00000f32f3653e83db01b819088ee0baf80c66b89b39b78766efbafc0cec660f388264b7b800078ed00f38ccdef3660f30", 0x3c}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff00000001}, @flags={0x3, 0x1802}], 0x2)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000080)={0xdddd1000, 0x1000})
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1) (async)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) (async)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
eventfd2(0x8, 0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000140)={0x3, 0x0, [{0x48f, 0x0, 0x76c}, {0xb6c, 0x0, 0x4}, {0x2ec, 0x0, 0x7fffffffffffffff}]})
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2000001) (async)
r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2000001)
ioctl$KVM_CAP_MAX_VCPU_ID(r13, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x2000400000009})
close(r9)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0xffffffffffffffff)

610.926289ms ago: executing program 7 (id=4355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x4, 0x40000090, &(0x7f0000000080)="d6fe673567775c14dec252b92d9247cb0ec48e7e613acab7f66d3d2601ff4a988c6483926d6c38c334107d06a75a3e015a6d7e619df789a711e56a5dcc81f0f3a8521f377f5420a35b8c3d709befd127ed603897309a4b0d138b35bd6a", &(0x7f00000001c0)="0af00ed19f8e28aa2bd9d2ec297bb683b4366c637f59dc75a6794463ea5411c16b0d052d0115153f60d2589b25c2d8ebc590072808bae46b58a34d7f5637e7f678c5889a66c2ceaa3b51431cfa20ac0450f2aac1fa880659f6eaeefbb42891c4b36755ebcc22a5a17cd81eb890deac64923be349c278ebc2439721736dc0a5c2ea87e2ca1c822515dbd18233f4023c6e1ab066692b3870868bc2646eeb726138fd702e95c9fe973839de4af1bc856f1fd05c2aea206e0bcb", 0x5d, 0xb8})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="660f300f080f017feaba4000ed66b9320200000f32ba6100b80e00ef660f3801ce0f229767260f01cf66b9800000c00f326635000800000f30", 0x39}], 0x1, 0x71, &(0x7f0000000080), 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000180)={0x58000, 0x110000})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r5, 0x541b, 0x26)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000000c0)="660f300f080f017feaba4000ed66b9320200000f32ba6100b80e00ef660f3801ce0f229767260f01cf66b9800000c00f326635000800000f30", 0x39}], 0x1, 0x72, &(0x7f0000000080), 0x0)
ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f0000000400)={0x26ef, 0x0, &(0x7f0000014000/0x3000)=nil})
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x11e, 0x0, 0x134e}, {0x815, 0x0, 0xfffffffffffffff9}, {0xbad, 0x0, 0x1}, {0xb15, 0x0, 0x3}, {0xabc, 0x0, 0xb9}]})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0xb02, 0x0, 0x5}, {0xa4, 0x0, 0x400000000000001}, {0xb84, 0x0, 0x1}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x8f}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0xbba, 0x0, 0x3}, {0xafd, 0x0, 0x1}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xffff)

299.039287ms ago: executing program 6 (id=4356):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)={0x3, 0x0, [{0x7, 0x0, 0x1, 0x2, 0xa1bb, 0xe, 0x3e}, {0x7, 0x200, 0x1, 0x7ac3, 0x2, 0xff, 0x5}, {0x9a75a475c086b082, 0xc, 0x3, 0x7, 0x592, 0x3}]}) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x1f) (async)
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x281, 0x0, 0x67}]})
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000380)={0xcc, 0x0, 0x1000000001}) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x40002) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9ca00, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x10d9})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async)
r10 = eventfd2(0xa, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
ioctl$KVM_HYPERV_EVENTFD(r12, 0x4018aebd, &(0x7f0000000000)={0x0, r10}) (async)
ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000000c0)) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20102, 0x0) (async)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r14, 0x4048ae9b, &(0x7f0000000040)={0x2, 0x0, {[0x8, 0x5e79, 0x1, 0x9, 0xe67, 0x400, 0xfffffffffffffff5, 0x8]}})

247.331725ms ago: executing program 7 (id=4357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x80000000, 0x80})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="660f300f080f017feaba4000ed66b9320200000f32ba6100b80e00ef660f3801ce0f229767260f01cf66b9800000c00f326635000800000f30", 0x39}], 0x1, 0x71, &(0x7f0000000080), 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000240)={0xd5, 0x0, 0x213a6ec243f2dab2})
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x29d, 0x0, 0x5}, {0x261, 0x0, 0x1}, {0xb84, 0x0, 0x5}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x4b}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0xbba, 0x0, 0x1}, {0xafd, 0x0, 0xb}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f1a10e442d537be2020611310c941ac0f0173000f5864a907b8010000000f01d93e66460f388230bc0f12f2ad66b8f0a566efc74424002201000036420f01c2ff1c24", 0x44}], 0x1, 0x4, &(0x7f0000000040), 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f00000002c0)={0x7, 0x0, [{0x1, 0x8, 0x4, 0x2, 0xc3e, 0xe, 0x1}, {0x40000001, 0x452d, 0x3, 0xc, 0x1, 0x2, 0x5854}, {0x7, 0x2, 0x6, 0xa6f5, 0x2, 0x1000, 0x7f}, {0x0, 0x2, 0x7, 0xffff, 0x8, 0x3, 0x3}, {0xb, 0x5, 0x6, 0x4, 0x1f8, 0x8, 0x81}, {0x4, 0x139, 0x3, 0x0, 0xfffffffe, 0xc10, 0x5}, {0x7, 0x0, 0x0, 0x8001, 0x8, 0xfffffe01}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 6 (id=4358):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = eventfd2(0x8, 0x801)
ioctl$KVM_CREATE_VM(r1, 0x40086602, 0x26)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="450f32c442d5376700c4611310c941ac0f0173000f5864a907b8010000000f01d9b91a0900000f3266ba410066b8f0a566efc744240022010000c744240200000000ff1c24", 0x45}], 0xaaaaaaaaaaaabaf, 0x42, &(0x7f00000001c0)=[@cr0={0x0, 0x3}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{0xc0011033, 0x0, 0xfffffffffffffffa}, {0xb71, 0x0, 0x7}, {0x932, 0x0, 0xa}]})
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000080)={0x80a0000, 0x41000, 0x4, 0x99, 0xe})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="653e64430f78acc004000000c7442400cd000000c744240218000000ff1c24c74424000a000000c74424022b000000c7442406000000000f01142466b861008ec0c461f8773e3664440fc5c970f30fc73166bad004ec66b8d9008ed836440f01c3", 0x61}], 0x1, 0x4, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @flags={0x3, 0x4014}], 0x2)
ioctl$KVM_CAP_PMU_CAPABILITY(r9, 0x4068aea3, &(0x7f0000000640)={0xd4, 0x0, 0xd0e})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x1)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r14, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x40000020, 0x0, 0x5}, {0x4d0, 0x0, 0x100000001}, {0xb84, 0x0, 0x5}, {0x6b1, 0x0, 0x6}, {0x33, 0x0, 0x4e}, {0xafd}, {0xa33, 0x0, 0x4}, {0x84f, 0x0, 0x5}, {0x304, 0x0, 0x1}, {0xafd, 0x0, 0xb}]})
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
ioctl$KVM_CREATE_VM(r15, 0xae01, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36974' (ED25519) to the list of known hosts.
syzkaller login: [   57.565274][ T5584] cgroup: Unknown subsys name 'net'
[   57.680419][ T5584] cgroup: Unknown subsys name 'cpuset'
[   57.685760][ T5584] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.114343][ T5584] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.159967][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.165576][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.169087][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.184249][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.188111][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.192943][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.196200][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.199348][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.215143][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.222319][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.226945][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.230833][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.235414][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.239539][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.242869][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.724391][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.727397][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.730046][ T5601] bridge_slave_0: entered allmulticast mode
[   63.733177][ T5601] bridge_slave_0: entered promiscuous mode
[   63.756931][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.760097][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.763065][ T5601] bridge_slave_1: entered allmulticast mode
[   63.766214][ T5601] bridge_slave_1: entered promiscuous mode
[   63.823705][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.833827][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.837741][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.840816][ T5605] bridge_slave_0: entered allmulticast mode
[   63.843930][ T5605] bridge_slave_0: entered promiscuous mode
[   63.853877][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.862557][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.865670][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.869235][ T5605] bridge_slave_1: entered allmulticast mode
[   63.873101][ T5605] bridge_slave_1: entered promiscuous mode
[   63.917490][ T5601] team0: Port device team_slave_0 added
[   63.921470][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.928406][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.942439][ T5601] team0: Port device team_slave_1 added
[   63.971240][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.973867][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.976281][ T5610] bridge_slave_0: entered allmulticast mode
[   63.979153][ T5610] bridge_slave_0: entered promiscuous mode
[   63.998362][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.001142][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.003598][ T5610] bridge_slave_1: entered allmulticast mode
[   64.006393][ T5610] bridge_slave_1: entered promiscuous mode
[   64.010286][ T5605] team0: Port device team_slave_0 added
[   64.012956][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.015625][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.024358][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.029460][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.031785][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.040313][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.051160][ T5605] team0: Port device team_slave_1 added
[   64.078690][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.089209][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.092459][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.094972][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.105264][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.121919][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.124675][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.134374][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.159850][ T5601] hsr_slave_0: entered promiscuous mode
[   64.163164][ T5601] hsr_slave_1: entered promiscuous mode
[   64.168908][ T5610] team0: Port device team_slave_0 added
[   64.179901][ T5610] team0: Port device team_slave_1 added
[   64.217976][ T5605] hsr_slave_0: entered promiscuous mode
[   64.220260][ T5605] hsr_slave_1: entered promiscuous mode
[   64.222463][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   64.224359][ T5605] Cannot create hsr debugfs directory
[   64.238530][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.241580][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.251357][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.268213][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.270958][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.279684][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.373508][ T5610] hsr_slave_0: entered promiscuous mode
[   64.377162][ T5610] hsr_slave_1: entered promiscuous mode
[   64.379464][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   64.381458][ T5610] Cannot create hsr debugfs directory
[   64.509837][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.518561][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.534612][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.539428][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.542522][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.547078][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.558136][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.563118][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.597399][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.604431][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.612171][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.616704][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.619640][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.623838][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.639102][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.641634][ T5601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.644308][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.647202][ T5601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.651485][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.657686][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.660937][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.663862][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.699501][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.704215][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.715171][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.720559][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.723455][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.727652][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.730480][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.734554][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.798348][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.825623][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[   64.834064][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.839257][  T815] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.841708][  T815] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.851179][  T815] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.854026][  T815] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.860968][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.874721][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   64.882741][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.885174][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.897179][  T815] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.899510][  T815] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.910449][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   64.923352][  T815] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.925712][  T815] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.946088][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.948653][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.234041][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.265281][ T5605] veth0_vlan: entered promiscuous mode
[   65.268416][ T5609] Bluetooth: hci2: command tx timeout
[   65.268426][ T5602] Bluetooth: hci1: command tx timeout
[   65.273295][ T5606] Bluetooth: hci0: command tx timeout
[   65.274486][ T5605] veth1_vlan: entered promiscuous mode
[   65.303221][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.313960][ T5605] veth0_macvtap: entered promiscuous mode
[   65.320720][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.325471][ T5605] veth1_macvtap: entered promiscuous mode
[   65.348302][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.362298][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.372251][ T5601] veth0_vlan: entered promiscuous mode
[   65.379191][ T5610] veth0_vlan: entered promiscuous mode
[   65.385742][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.394614][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.399195][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.404086][ T5601] veth1_vlan: entered promiscuous mode
[   65.407333][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.430636][ T5610] veth1_vlan: entered promiscuous mode
[   65.477338][ T5601] veth0_macvtap: entered promiscuous mode
[   65.485688][ T5601] veth1_macvtap: entered promiscuous mode
[   65.487967][  T815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.494607][  T815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.502661][ T5610] veth0_macvtap: entered promiscuous mode
[   65.520130][ T5610] veth1_macvtap: entered promiscuous mode
[   65.533994][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.537368][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.540510][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.543754][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.547278][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.558565][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.562225][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.572364][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.585715][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.602879][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.603877][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.630745][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.635983][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.655860][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.672825][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.705156][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.713051][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.779716][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.786741][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.813860][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.824268][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.853670][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.857890][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.347142][ T5606] Bluetooth: hci0: command tx timeout
[   67.349863][ T5602] Bluetooth: hci2: command tx timeout
[   67.349918][ T5609] Bluetooth: hci1: command tx timeout
[   67.487341][ T5768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[   69.427491][ T5609] Bluetooth: hci2: command tx timeout
[   69.427739][ T5602] Bluetooth: hci0: command tx timeout
[   69.437238][ T5602] Bluetooth: hci1: command tx timeout
[   71.506673][ T5602] Bluetooth: hci2: command tx timeout
[   71.506876][ T5609] Bluetooth: hci1: command tx timeout
[   71.508969][ T5602] Bluetooth: hci0: command tx timeout
[   71.710302][ T5886] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2287898620 (18303188960 ns) > initial count (10719952592 ns). Using initial count to start timer.
[   71.733659][ T5882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[   71.780837][ T5887] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[   74.493647][ T5949] kvm: MWAIT instruction emulated as NOP!
[   76.397661][ T5995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[   76.762320][ T6005] KVM: debugfs: duplicate directory 6005-15
[   76.879427][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   76.884840][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   80.057739][ T6093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3632499393 (14529997572 ns) > initial count (7317205168 ns). Using initial count to start timer.
[   80.082354][ T6093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3632499393 (14529997572 ns) > initial count (7317205168 ns). Using initial count to start timer.
[   81.743612][ T6146] KVM: debugfs: duplicate directory 6146-10
[   82.657198][ T6183] KVM: debugfs: duplicate directory 6183-8
[   84.274830][ T6228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[   85.036042][ T6251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   87.109759][   T24] cfg80211: failed to load regulatory.db
[   87.911058][ T6342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[   89.930100][ T6409] kvm: kvm [6408]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0xc2) = 0xc
[   93.084981][ T6506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   98.065921][ T6672] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[   99.074750][ T6712] kvm: user requested TSC rate below hardware speed
[   99.081700][ T6713] kvm: user requested TSC rate below hardware speed
[  102.543269][ T6831] kvm: pic: non byte read
[  103.622583][ T6867] kvm: pic: non byte read
[  104.102662][ T6871] kvm: kvm [6870]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x134e
[  115.852836][ T7144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1818392207 (58188550624 ns) > initial count (43559072736 ns). Using initial count to start timer.
[  117.301612][ T7180] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  119.173138][ T7218] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  123.573633][ T7344] kvm_intel: kvm [7342]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  125.460243][ T7400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  126.732447][ T7441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  126.742531][ T7441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  127.339658][ T7466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  131.867291][ T7606] kvm: apic: phys broadcast and lowest prio
[  131.936002][ T7606] kvm: pic: non byte read
[  131.948949][ T7606] kvm: apic: phys broadcast and lowest prio
[  137.670920][ T7759] kvm: pic: non byte read
[  138.094838][ T7780] kvm: pic: non byte read
[  138.109982][ T7786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3632499393 (14529997572 ns) > initial count (7317205168 ns). Using initial count to start timer.
[  138.309593][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.311952][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  140.050262][ T7845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  140.060184][ T7845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  140.082273][ T7845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.055955][ T7873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.059981][ T7873] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.282824][ T7881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.314840][ T7881] kvm: user requested TSC rate below hardware speed
[  144.441594][ T7997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  151.076247][ T8165] kvm: kvm [8164]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001e) = 0x5
[  154.669421][ T8266] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3214763883 (411489777024 ns) > initial count (396622841600 ns). Using initial count to start timer.
[  154.676295][ T8267] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3214763883 (411489777024 ns) > initial count (396622841600 ns). Using initial count to start timer.
[  158.820668][ T8382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  161.190405][ T8476] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  161.631063][ T8487] kvm: kvm [8486]: vcpu0, guest rIP: 0x22 Unhandled WRMSR(0xc1) = 0x4a88
[  164.432679][ T8567] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  164.719687][ T8578] kvm: kvm [8569]: vcpu0, guest rIP: 0xc0 Unhandled WRMSR(0xc1) = 0xd06e
[  166.329787][ T8609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  166.341258][ T8609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  166.385410][ T8609] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  167.093780][ T8649] kvm: kvm [8648]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x7
[  167.591514][ T8668] kvm: user requested TSC rate below hardware speed
[  170.962113][ T8754] kvm: kvm [8750]: vcpu3, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001e)
[  172.379473][ T8785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  173.334705][ T8804] KVM: debugfs: duplicate directory 8804-16
[  179.199623][ T8992] kvm: pic: non byte read
[  194.997488][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  195.003867][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  195.007492][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  195.012945][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  195.017032][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.073881][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.082944][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.090042][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.096369][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.106620][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  195.232132][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  195.236313][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  195.239714][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  195.243573][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  195.246707][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  195.884419][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.887336][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.889914][ T9016] bridge_slave_0: entered allmulticast mode
[  195.892519][ T9016] bridge_slave_0: entered promiscuous mode
[  195.925886][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.928556][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.931254][ T9016] bridge_slave_1: entered allmulticast mode
[  195.934031][ T9016] bridge_slave_1: entered promiscuous mode
[  195.980075][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.983189][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.986119][ T9013] bridge_slave_0: entered allmulticast mode
[  195.991662][ T9013] bridge_slave_0: entered promiscuous mode
[  195.996078][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.999219][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.002225][ T9013] bridge_slave_1: entered allmulticast mode
[  196.005832][ T9013] bridge_slave_1: entered promiscuous mode
[  196.011252][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.038302][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.042178][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.045358][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.048813][ T9023] bridge_slave_0: entered allmulticast mode
[  196.052702][ T9023] bridge_slave_0: entered promiscuous mode
[  196.079764][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.083972][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.086852][ T9023] bridge_slave_1: entered allmulticast mode
[  196.089623][ T9023] bridge_slave_1: entered promiscuous mode
[  196.095024][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.114843][ T9016] team0: Port device team_slave_0 added
[  196.132003][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.137483][ T9016] team0: Port device team_slave_1 added
[  196.172374][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.191156][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.196125][ T9013] team0: Port device team_slave_0 added
[  196.200401][ T9013] team0: Port device team_slave_1 added
[  196.202903][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.205933][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.218490][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.224776][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.227169][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.235823][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.284549][ T9023] team0: Port device team_slave_0 added
[  196.295267][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.298538][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.308820][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.316026][ T9023] team0: Port device team_slave_1 added
[  196.329272][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.332133][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.343820][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.367654][ T9016] hsr_slave_0: entered promiscuous mode
[  196.371922][ T9016] hsr_slave_1: entered promiscuous mode
[  196.374884][ T9016] debugfs: 'hsr0' already exists in 'hsr'
[  196.377671][ T9016] Cannot create hsr debugfs directory
[  196.401463][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.404264][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.414340][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.432293][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.434834][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.443340][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.481805][ T9013] hsr_slave_0: entered promiscuous mode
[  196.484100][ T9013] hsr_slave_1: entered promiscuous mode
[  196.487130][ T9013] debugfs: 'hsr0' already exists in 'hsr'
[  196.489726][ T9013] Cannot create hsr debugfs directory
[  196.551150][ T9023] hsr_slave_0: entered promiscuous mode
[  196.554286][ T9023] hsr_slave_1: entered promiscuous mode
[  196.558006][ T9023] debugfs: 'hsr0' already exists in 'hsr'
[  196.560470][ T9023] Cannot create hsr debugfs directory
[  196.706691][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  196.708847][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  196.710855][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  196.864353][ T9016] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  196.869882][ T9016] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  196.873128][ T9016] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  196.877857][ T9016] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  196.882006][ T9016] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  196.888024][ T9016] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  196.898389][ T9016] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  196.903782][ T9016] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  196.975482][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.986120][ T9013] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  196.991810][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  196.994832][ T9013] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  197.002151][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  197.017078][ T9013] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  197.021839][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  197.035683][ T9013] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  197.042005][ T9013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  197.071125][ T9023] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  197.078173][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  197.094187][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.106710][ T5606] Bluetooth: hci3: command tx timeout
[  197.114173][ T9023] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.119027][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  197.126348][ T9023] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.131926][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  197.135022][ T9023] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.141755][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  197.165570][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.189293][ T5606] Bluetooth: hci4: command tx timeout
[  197.223836][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.244773][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.267122][ T5606] Bluetooth: hci5: command tx timeout
[  197.285016][ T9016] 8021q: adding VLAN 0 to HW filter on device team0
[  197.325825][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.328745][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.344516][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.347518][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.386054][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.419546][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.444956][   T13] bridge_slave_1: left allmulticast mode
[  197.452280][   T13] bridge_slave_1: left promiscuous mode
[  197.460430][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.471410][   T13] bridge_slave_0: left allmulticast mode
[  197.473849][   T13] bridge_slave_0: left promiscuous mode
[  197.477056][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.672186][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.677218][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.681006][   T13] bond0 (unregistering): Released all slaves
[  197.696062][ T5345] 8021q: adding VLAN 0 to HW filter on device eth1
[  197.738219][ T9023] 8021q: adding VLAN 0 to HW filter on device team0
[  197.755882][ T9013] 8021q: adding VLAN 0 to HW filter on device team0
[  197.799222][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.802363][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.812181][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.815335][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.871024][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.874034][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.883306][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.886321][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.092319][   T13] hsr_slave_0: left promiscuous mode
[  198.098993][   T13] hsr_slave_1: left promiscuous mode
[  198.103495][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.116550][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.120829][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.123866][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.135835][   T13] veth1_macvtap: left promiscuous mode
[  198.140384][   T13] veth0_macvtap: left promiscuous mode
[  198.142879][   T13] veth1_vlan: left promiscuous mode
[  198.145847][   T13] veth0_vlan: left promiscuous mode
[  198.308748][   T13] team0 (unregistering): Port device team_slave_1 removed
[  198.322226][   T13] team0 (unregistering): Port device team_slave_0 removed
[  198.442368][ T5345] 8021q: adding VLAN 0 to HW filter on device eth2
[  198.725229][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.890692][ T5345] 8021q: adding VLAN 0 to HW filter on device eth3
[  198.968541][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.041873][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.073724][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.112737][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.149726][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.186789][ T5606] Bluetooth: hci3: command tx timeout
[  199.190749][ T9016] veth0_vlan: entered promiscuous mode
[  199.206997][ T9016] veth1_vlan: entered promiscuous mode
[  199.243241][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.260138][ T5345] 8021q: adding VLAN 0 to HW filter on device eth4
[  199.266795][ T5606] Bluetooth: hci4: command tx timeout
[  199.303181][ T9013] veth0_vlan: entered promiscuous mode
[  199.309262][ T9016] veth0_macvtap: entered promiscuous mode
[  199.323347][ T9016] veth1_macvtap: entered promiscuous mode
[  199.336588][ T9013] veth1_vlan: entered promiscuous mode
[  199.347848][ T5606] Bluetooth: hci5: command tx timeout
[  199.363749][ T9023] veth0_vlan: entered promiscuous mode
[  199.418903][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.431761][ T9023] veth1_vlan: entered promiscuous mode
[  199.452184][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.485336][ T5466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.490782][ T5466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.511049][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.525098][ T9013] veth0_macvtap: entered promiscuous mode
[  199.531919][ T5466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.536030][ T5466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.550590][ T9013] veth1_macvtap: entered promiscuous mode
[  199.580100][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.663709][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.690835][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.723197][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.741044][ T9023] veth0_macvtap: entered promiscuous mode
[  199.750367][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  199.753209][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  199.763210][ T5466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.769040][ T5466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.772681][ T5466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.778884][ T9023] veth1_macvtap: entered promiscuous mode
[  199.797166][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.803325][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.803772][ T5466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.807585][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.819050][ T5345] 8021q: adding VLAN 0 to HW filter on device eth5
[  199.881224][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.888862][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.901112][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.965526][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.986014][   T13] bridge_slave_1: left allmulticast mode
[  199.991725][   T13] bridge_slave_1: left promiscuous mode
[  199.997363][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.012323][   T13] bridge_slave_0: left allmulticast mode
[  200.014892][   T13] bridge_slave_0: left promiscuous mode
[  200.017334][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.032958][   T13] bridge_slave_1: left allmulticast mode
[  200.035280][   T13] bridge_slave_1: left promiscuous mode
[  200.038348][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.048989][   T13] bridge_slave_0: left allmulticast mode
[  200.051335][   T13] bridge_slave_0: left promiscuous mode
[  200.055031][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.331237][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.338930][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.344684][   T13] bond0 (unregistering): Released all slaves
[  200.535998][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.545955][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.553348][   T13] bond0 (unregistering): Released all slaves
[  200.585304][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.590501][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.594332][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.602158][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.657160][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.666985][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.783864][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.790877][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.893907][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.911882][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.009088][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.014794][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.018174][ T5345] 8021q: adding VLAN 0 to HW filter on device eth6
[  201.135295][   T13] hsr_slave_0: left promiscuous mode
[  201.140822][   T13] hsr_slave_1: left promiscuous mode
[  201.145000][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.155738][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.173210][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.180187][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.212102][   T13] hsr_slave_0: left promiscuous mode
[  201.221766][   T13] hsr_slave_1: left promiscuous mode
[  201.228524][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.238055][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.244487][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.250278][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.266803][ T5606] Bluetooth: hci3: command tx timeout
[  201.299382][   T13] veth1_macvtap: left promiscuous mode
[  201.302866][   T13] veth0_macvtap: left promiscuous mode
[  201.309825][   T13] veth1_vlan: left promiscuous mode
[  201.312326][   T13] veth0_vlan: left promiscuous mode
[  201.315956][   T13] veth1_macvtap: left promiscuous mode
[  201.317925][   T13] veth0_macvtap: left promiscuous mode
[  201.322740][   T13] veth1_vlan: left promiscuous mode
[  201.327402][   T13] veth0_vlan: left promiscuous mode
[  201.346807][ T5606] Bluetooth: hci4: command tx timeout
[  201.428895][ T5606] Bluetooth: hci5: command tx timeout
[  201.718880][   T13] team0 (unregistering): Port device team_slave_1 removed
[  201.730902][   T13] team0 (unregistering): Port device team_slave_0 removed
[  202.082887][   T13] team0 (unregistering): Port device team_slave_1 removed
[  202.095897][   T13] team0 (unregistering): Port device team_slave_0 removed
[  202.367457][ T5345] 8021q: adding VLAN 0 to HW filter on device eth7
[  202.778763][ T5345] 8021q: adding VLAN 0 to HW filter on device eth8
[  203.068244][ T5345] 8021q: adding VLAN 0 to HW filter on device eth9
[  203.346784][ T5606] Bluetooth: hci3: command tx timeout
[  203.427091][ T5345] 8021q: adding VLAN 0 to HW filter on device eth10
[  203.437016][ T5606] Bluetooth: hci4: command tx timeout
[  203.517091][ T5606] Bluetooth: hci5: command tx timeout
[  203.755136][ T5345] 8021q: adding VLAN 0 to HW filter on device eth11
[  204.012624][ T5345] 8021q: adding VLAN 0 to HW filter on device eth12
[  205.263701][ T9359] kvm: vcpu 6: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  222.800256][ T9546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  222.870212][ T9551] KVM: debugfs: duplicate directory 9551-8
[  224.233526][ T9608] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  225.232606][ T9644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  225.818785][ T9672] KVM: debugfs: duplicate directory 9672-16
[  231.093705][ T9861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  232.500929][ T9908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  232.522597][ T9908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  233.288244][ T9935] kvm: kvm [9934]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001e) = 0x5
[  237.789586][T10097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  239.971372][T10173] kvm: apic: phys broadcast and lowest prio
[  241.479373][T10224] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  241.615381][T10228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  243.928651][T10319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  244.499265][T10341] KVM: debugfs: duplicate directory 10341-18
[  244.860306][T10348] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3214763883 (411489777024 ns) > initial count (396622841600 ns). Using initial count to start timer.
[  247.227404][T10428] kvm: kvm [10426]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x134e
[  250.160251][T10502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3736973132 (14947892528 ns) > initial count (14637679964 ns). Using initial count to start timer.
[  250.208715][T10501] kvm: kvm [10499]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x134e
[  251.268311][T10521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  252.264038][T10534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  255.749171][T10675] kvm: pic: non byte read
[  259.924181][T10812] kvm: kvm [10810]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x134e
[  260.551235][T10830] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  261.190992][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  261.194841][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  261.390854][T10850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  270.074485][T11106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  272.730270][T11172] kvm: user requested TSC rate below hardware speed
[  272.918104][T11172] kvm: user requested TSC rate below hardware speed
[  273.051905][T11177] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  282.454371][T11442] kvm: pic: non byte read
[  285.032577][T11525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  285.585399][T11540] kvm_intel: kvm [11539]: vcpu6, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff
[  287.020432][T11586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  287.185368][T11586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  287.217331][T11586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  289.515040][T11675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  294.142163][T11822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  300.149254][T11970] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  300.563540][T11979] kvm: kvm [11978]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x134e
[  301.091920][T11996] kvm: kvm [11995]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001e) = 0x5
[  304.153980][T12114] kvm: user requested TSC rate below hardware speed
[  305.295567][T12148] kvm: pic: non byte read
[  314.134862][T12380] kvm: user requested TSC rate below hardware speed
[  314.141996][T12379] kvm: user requested TSC rate below hardware speed
[  314.885512][T12386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1818392207 (58188550624 ns) > initial count (43559072736 ns). Using initial count to start timer.
[  314.914293][T12386] KVM: debugfs: duplicate directory 12386-14
[  314.921575][T12388] KVM: debugfs: duplicate directory 12388-5
[  316.559828][T12445] kvm: pic: non byte read
[  317.552924][T12477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3886506761 (7773013522 ns) > initial count (4655878672 ns). Using initial count to start timer.
[  319.586671][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  319.589355][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  319.591976][ T5606] Bluetooth: hci4: command 0x0406 tx timeout
[  322.400473][T12627] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  322.633112][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  322.635447][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  323.556017][T12669] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=33947664 (67895328 ns) > initial count (69470 ns). Using initial count to start timer.
[  324.647057][T12689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  327.230696][T12772] kvm: kvm [12770]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x134e
[  328.938046][T12832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  328.976299][T12836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1818392207 (58188550624 ns) > initial count (43559072736 ns). Using initial count to start timer.
[  329.567807][T12862] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  330.284269][T12885] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  331.052100][T12918] KVM: debugfs: duplicate directory 12918-15
[  331.100527][T12920] kvm: kvm [12919]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x134e
[  331.773978][T12945] kvm: apic: phys broadcast and lowest prio
[  332.442629][T12962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  336.236169][T13051] kvm: user requested TSC rate below hardware speed
[  336.291624][T13051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  341.876814][T13203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  342.091970][T13211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  342.103313][T13210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  342.686917][T13236] KVM: debugfs: duplicate directory 13236-10
[  343.939669][T13281] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  344.971803][T13303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  345.111695][T13308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  345.596551][T13322] kvm_intel: kvm [13321]: vcpu6, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff
[  346.718337][T13340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  352.022484][T13537] kvm: kvm [13536]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x7
[  352.155404][T13542] kvm: kvm [13536]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x134e
[  352.855051][T13568] KVM: debugfs: duplicate directory 13568-10
[  355.519813][T13629] kvm_intel: kvm [13628]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff
[  357.532909][T13709] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  357.900430][T13726] kvm: pic: non byte read
[  361.314547][T13827] kvm: pic: non byte read
[  368.427227][T14058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  370.985378][T14088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  372.370746][T14123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3632499393 (14529997572 ns) > initial count (7317205168 ns). Using initial count to start timer.
[  372.466270][T14130] kvm: kvm [14127]: vcpu0, guest rIP: 0x22 Unhandled WRMSR(0xc1) = 0x4a88
[  373.815082][T14162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  373.908014][T14166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  374.510423][T14185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  375.986097][T14232] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  376.652255][T14255] kvm: kvm [14254]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x8001
[  384.079658][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  384.082364][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  387.251933][T14574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  397.977570][T14596] kvm: user requested TSC rate below hardware speed
[  398.967178][T14623] kvm: kvm [14622]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x134e
[  399.929303][T14652] kvm: user requested TSC rate below hardware speed
[  401.222329][T14667] kvm: kvm [14666]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x8001
[  403.218769][T14711] KVM: debugfs: duplicate directory 14711-12
[  405.281964][T14785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  405.294211][T14785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  406.000215][T14809] kvm: apic: phys broadcast and lowest prio
[  408.385916][T14862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  411.139469][T14925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  416.872070][T15102] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  417.305744][T15116] kvm_intel: kvm [15115]: vcpu6, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff
[  418.176231][T15142] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3214763883 (411489777024 ns) > initial count (396622841600 ns). Using initial count to start timer.
[  430.199167][T15480] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3886506761 (7773013522 ns) > initial count (4655878672 ns). Using initial count to start timer.
[  433.674665][T15527] kvm: kvm [15526]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0xc2) = 0xc
[  434.475964][T15543] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  434.758731][T15554] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  438.239080][T15682] kvm: pic: non byte read
[  441.046155][T15755] kvm: kvm [15754]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x7
[  442.536425][T15790] kvm: pic: non byte read
[  443.881697][T15850] kvm: user requested TSC rate below hardware speed
[  445.381484][T15888] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  445.513175][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  445.516180][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  445.658610][T15898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  445.794010][T15906] kvm: user requested TSC rate below hardware speed
[  448.562338][T15989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  454.030843][T16136] kvm: user requested TSC rate below hardware speed
[  454.041027][T16136] kvm: user requested TSC rate below hardware speed
[  456.563215][T16200] KVM: debugfs: duplicate directory 16200-7
[  457.853222][T16234] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  457.859557][T16236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  464.148583][T16426] kvm: pic: non byte read
[  464.388649][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x22 Unhandled WRMSR(0xc1) = 0x4a88
[  466.282058][T16504] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  466.297226][T16504] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  467.466047][T16554] kvm: kvm [16552]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x134e
[  467.715819][T16557] kvm: pic: non byte read
[  469.886996][T16617] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  470.235586][T16630] kvm: user requested TSC rate below hardware speed
[  473.072846][T16713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  475.652655][T16787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  476.831777][T16824] kvm: kvm [16823]: vcpu0, guest rIP: 0x9127 Unhandled WRMSR(0x11e) = 0xc00c60200ac
[  477.460086][T16848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  478.803443][T16871] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  481.343861][T16941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  481.356315][T16942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  481.795813][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.805799][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.809250][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.812593][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.822642][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.827489][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.830643][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.833837][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.839189][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.842304][T16963] kvm_intel: kvm [16962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  481.865292][T16968] kvm: kvm [16967]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x134e
[  488.442487][T17177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  488.469625][T17179] kvm: pic: non byte read
[  488.761253][T17189] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3214763883 (411489777024 ns) > initial count (396622841600 ns). Using initial count to start timer.
[  489.388230][T17201] kvm: apic: phys broadcast and lowest prio
[  492.557448][T17310] KVM: debugfs: duplicate directory 17310-6
[  493.632605][T17349] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  494.050357][T17369] kvm: user requested TSC rate below hardware speed
[  496.160592][T17432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  498.643802][T17521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  503.255971][T17700] kvm: kvm [17699]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x8001
[  504.311584][T17728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3452208038 (441882628864 ns) > initial count (212677455232 ns). Using initial count to start timer.
[  506.036410][T17783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  506.949455][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  506.952383][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  509.214544][T17884] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  511.913474][T17965] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  513.783823][T18044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  515.550173][T18111] kvm: kvm [18110]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0x134e
[  515.663037][T18114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  515.964676][T18119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  517.382970][T18170] kvm: kvm [18169]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000001e) = 0x5
[  518.255341][T18196] kvm: user requested TSC rate below hardware speed
[  518.382738][T18203] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3214763883 (411489777024 ns) > initial count (396622841600 ns). Using initial count to start timer.
[  519.184558][T18233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  522.277346][T18334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  524.594898][T18417] kvm: user requested TSC rate below hardware speed
[  525.008605][T18436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  526.860682][T18496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3307229379 (52915670064 ns) > initial count (7842836672 ns). Using initial count to start timer.
[  526.882064][T18496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  527.333816][T18518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  527.684055][T18529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3886506761 (7773013522 ns) > initial count (4655878672 ns). Using initial count to start timer.
[  527.691052][T18526] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  528.759655][T18570] kvm: pic: non byte read
[  534.579562][T18767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  537.162123][T18827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  540.704766][T18915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4254542082 (272290693248 ns) > initial count (73079028416 ns). Using initial count to start timer.
[  542.408646][T18942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  544.003224][T18986] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  544.622960][T18997] kvm: user requested TSC rate below hardware speed
[  545.750692][T19024] kvm: user requested TSC rate below hardware speed
[  547.267839][T19065] kvm: user requested TSC rate below hardware speed
[  550.331883][T19164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4 (8 ns) > initial count (2 ns). Using initial count to start timer.
[  551.182889][T19203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  558.890044][T19437] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  567.383036][T19679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  568.389039][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  568.391531][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  568.639235][T19718] kvm: pic: non byte read
[  568.650724][T19718] kvm: pic: non byte write
[  568.722894][T19718] kvm: pic: non byte read
[  568.731692][T19718] kvm: pic: non byte write
[  570.781039][T19802] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  573.123954][T19873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  575.481555][T19960] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  580.109127][T20089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  582.181738][T20157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4254542082 (272290693248 ns) > initial count (73079028416 ns). Using initial count to start timer.
[  582.920731][T20180] KVM: debugfs: duplicate directory 20180-20
[  590.283017][T20428] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42074128 (84148256 ns) > initial count (69470 ns). Using initial count to start timer.
[  592.083482][T20497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  592.374585][T20514] kvm: kvm [20513]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001e)
[  664.892415][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  664.894767][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  665.111479][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  665.121689][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  665.125292][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  665.138164][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  665.152771][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  665.220719][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  665.226905][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  665.230028][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  665.235653][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  665.254834][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  665.318720][ T5669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.329596][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  665.333578][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  665.336264][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  665.339749][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  665.342802][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  665.550050][ T5669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.722142][ T5669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.865995][ T5669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.160822][ T5669] bridge_slave_1: left allmulticast mode
[  666.162695][ T5669] bridge_slave_1: left promiscuous mode
[  666.165251][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.171441][ T5669] bridge_slave_0: left allmulticast mode
[  666.173550][ T5669] bridge_slave_0: left promiscuous mode
[  666.175536][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.316255][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.323129][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.328525][ T5669] bond0 (unregistering): Released all slaves
[  666.518939][T20554] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.522154][T20554] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.525227][T20554] bridge_slave_0: entered allmulticast mode
[  666.528970][T20554] bridge_slave_0: entered promiscuous mode
[  666.532103][T20554] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.534648][T20554] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.537482][T20554] bridge_slave_1: entered allmulticast mode
[  666.540129][T20554] bridge_slave_1: entered promiscuous mode
[  666.611918][T20554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.628415][T20550] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.631633][T20550] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.634678][T20550] bridge_slave_0: entered allmulticast mode
[  666.638959][T20550] bridge_slave_0: entered promiscuous mode
[  666.642534][T20550] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.645101][T20550] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.647628][T20550] bridge_slave_1: entered allmulticast mode
[  666.650712][T20550] bridge_slave_1: entered promiscuous mode
[  666.654845][T20554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.718003][ T5669] hsr_slave_0: left promiscuous mode
[  666.720140][ T5669] hsr_slave_1: left promiscuous mode
[  666.722439][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.724969][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.728537][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.730934][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.737530][ T5669] veth1_macvtap: left promiscuous mode
[  666.739582][ T5669] veth0_macvtap: left promiscuous mode
[  666.741512][ T5669] veth1_vlan: left promiscuous mode
[  666.743453][ T5669] veth0_vlan: left promiscuous mode
[  666.891120][ T5669] team0 (unregistering): Port device team_slave_1 removed
[  666.913137][ T5669] team0 (unregistering): Port device team_slave_0 removed
[  667.009596][T20554] team0: Port device team_slave_0 added
[  667.032091][T20550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.037416][T20554] team0: Port device team_slave_1 added
[  667.064320][T20550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.079232][T20561] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.082818][T20561] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.085702][T20561] bridge_slave_0: entered allmulticast mode
[  667.089833][T20561] bridge_slave_0: entered promiscuous mode
[  667.106232][T20554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.109424][T20554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.124319][T20554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.129366][T20561] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.132985][T20561] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.135995][T20561] bridge_slave_1: entered allmulticast mode
[  667.140935][T20561] bridge_slave_1: entered promiscuous mode
[  667.155889][T20554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.158901][T20554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.170064][T20554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.196670][ T5609] Bluetooth: hci0: command tx timeout
[  667.213744][T20550] team0: Port device team_slave_0 added
[  667.225431][T20561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.234129][T20550] team0: Port device team_slave_1 added
[  667.250083][T20561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.254944][ T5345] 8021q: adding VLAN 0 to HW filter on device eth13
[  667.294979][T20550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.298025][T20550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.308990][T20550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.315024][T20550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.318500][T20550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.328642][T20550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.343046][T20561] team0: Port device team_slave_0 added
[  667.353864][T20554] hsr_slave_0: entered promiscuous mode
[  667.357080][ T5609] Bluetooth: hci1: command tx timeout
[  667.357350][T20554] hsr_slave_1: entered promiscuous mode
[  667.375158][T20561] team0: Port device team_slave_1 added
[  667.429546][T20561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.432869][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.442458][ T5609] Bluetooth: hci2: command tx timeout
[  667.445291][T20561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.468933][T20561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.471165][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.479592][T20561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.490008][T20550] hsr_slave_0: entered promiscuous mode
[  667.493228][T20550] hsr_slave_1: entered promiscuous mode
[  667.496295][T20550] debugfs: 'hsr0' already exists in 'hsr'
[  667.499162][T20550] Cannot create hsr debugfs directory
[  667.598276][T20561] hsr_slave_0: entered promiscuous mode
[  667.601460][T20561] hsr_slave_1: entered promiscuous mode
[  667.604620][T20561] debugfs: 'hsr0' already exists in 'hsr'
[  667.608745][T20561] Cannot create hsr debugfs directory
[  667.659775][ T5669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.702758][ T5345] 8021q: adding VLAN 0 to HW filter on device eth14
[  667.745808][ T5669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.817086][ T5669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.902799][ T5669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.928194][T20554] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  667.935939][T20554] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  667.940654][T20554] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  667.948376][T20554] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  667.952189][T20554] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  667.960361][T20554] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  667.978026][T20554] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  667.983940][T20554] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  668.089467][T20550] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  668.108624][T20550] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  668.111418][T20550] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  668.117385][T20550] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  668.134382][T20550] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  668.144226][T20550] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  668.148546][T20550] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  668.158116][T20550] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  668.169267][ T5345] 8021q: adding VLAN 0 to HW filter on device eth15
[  668.210136][ T5669] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.285031][ T5669] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.320162][T20561] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  668.335220][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  668.350187][T20561] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  668.357507][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  668.361088][T20561] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  668.367220][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  668.382861][ T5669] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.396794][T20561] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  668.403173][T20561] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  668.443981][T20554] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.465357][ T5669] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.485992][T20554] 8021q: adding VLAN 0 to HW filter on device team0
[  668.502061][ T2205] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.504463][ T2205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.519086][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.521520][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.526150][ T5345] 8021q: adding VLAN 0 to HW filter on device eth16
[  668.559555][T20550] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.623745][T20550] 8021q: adding VLAN 0 to HW filter on device team0
[  668.654822][ T2205] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.657898][ T2205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.671773][ T5669] bridge_slave_1: left allmulticast mode
[  668.673686][ T5669] bridge_slave_1: left promiscuous mode
[  668.675588][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.682275][ T5669] bridge_slave_0: left allmulticast mode
[  668.684189][ T5669] bridge_slave_0: left promiscuous mode
[  668.686793][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.695604][ T5669] bridge_slave_1: left allmulticast mode
[  668.698150][ T5669] bridge_slave_1: left promiscuous mode
[  668.700599][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.705114][ T5669] bridge_slave_0: left allmulticast mode
[  668.707383][ T5669] bridge_slave_0: left promiscuous mode
[  668.709366][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.831788][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.836926][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.840658][ T5669] bond0 (unregistering): Released all slaves
[  668.922816][ T5669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.931377][ T5669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.935138][ T5669] bond0 (unregistering): Released all slaves
[  668.942812][T20561] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.952063][ T5345] 8021q: adding VLAN 0 to HW filter on device eth17
[  668.961550][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.964664][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.008070][T20561] 8021q: adding VLAN 0 to HW filter on device team0
[  669.041222][ T2205] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.044327][ T2205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.077412][ T2205] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.080587][ T2205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.267449][ T5609] Bluetooth: hci0: command tx timeout
[  669.426779][ T5609] Bluetooth: hci1: command tx timeout
[  669.502693][ T5669] hsr_slave_0: left promiscuous mode
[  669.512088][ T5609] Bluetooth: hci2: command tx timeout
[  669.519099][ T5669] hsr_slave_1: left promiscuous mode
[  669.523072][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.526315][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.534772][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.537571][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.543451][ T5669] hsr_slave_0: left promiscuous mode
[  669.545864][ T5669] hsr_slave_1: left promiscuous mode
[  669.548920][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.551483][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.554274][ T5669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.556879][ T5669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.565135][ T5669] veth1_macvtap: left promiscuous mode
[  669.567584][ T5669] veth0_macvtap: left promiscuous mode
[  669.569500][ T5669] veth1_vlan: left promiscuous mode
[  669.571206][ T5669] veth0_vlan: left promiscuous mode
[  669.573635][ T5669] veth1_macvtap: left promiscuous mode
[  669.575400][ T5669] veth0_macvtap: left promiscuous mode
[  669.577597][ T5669] veth1_vlan: left promiscuous mode
[  669.579374][ T5669] veth0_vlan: left promiscuous mode
[  669.740055][ T5669] team0 (unregistering): Port device team_slave_1 removed
[  669.747654][ T5669] team0 (unregistering): Port device team_slave_0 removed
[  669.923912][ T5669] team0 (unregistering): Port device team_slave_1 removed
[  669.932922][ T5669] team0 (unregistering): Port device team_slave_0 removed
[  670.007512][ T5345] 8021q: adding VLAN 0 to HW filter on device eth18
[  670.013902][T20554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.188687][T20561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.243625][T20550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.380725][T20554] veth0_vlan: entered promiscuous mode
[  670.391546][T20554] veth1_vlan: entered promiscuous mode
[  670.453274][T20554] veth0_macvtap: entered promiscuous mode
[  670.461744][ T5345] 8021q: adding VLAN 0 to HW filter on device eth19
[  670.472560][T20554] veth1_macvtap: entered promiscuous mode
[  670.515598][T20554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.531442][T20561] veth0_vlan: entered promiscuous mode
[  670.536219][T20554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.563768][T20561] veth1_vlan: entered promiscuous mode
[  670.568969][T20560] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.572523][T20560] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.576401][T20560] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.595278][T20560] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.606086][T20550] veth0_vlan: entered promiscuous mode
[  670.617696][T20550] veth1_vlan: entered promiscuous mode
[  670.661485][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.669607][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.674802][T20561] veth0_macvtap: entered promiscuous mode
[  670.700794][T20550] veth0_macvtap: entered promiscuous mode
[  670.709326][T20561] veth1_macvtap: entered promiscuous mode
[  670.710575][T13239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.715987][T13239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.728833][T20561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.740972][T20550] veth1_macvtap: entered promiscuous mode
[  670.760419][T20561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.783247][T20560] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.796161][T20560] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.809839][T20550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.833080][ T5345] 8021q: adding VLAN 0 to HW filter on device eth20
[  670.836244][T20560] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.846564][T20560] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.861265][T20550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.891898][ T5669] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.902335][ T5669] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.913516][ T5669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.921137][ T5669] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.964803][ T2205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.970839][ T2205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.009029][ T2205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.015077][ T2205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.038359][ T3382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.045007][ T3382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.091031][ T2205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.098916][ T2205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.244119][ T5345] 8021q: adding VLAN 0 to HW filter on device eth21
[  671.350025][ T5609] Bluetooth: hci0: command tx timeout
[  671.472657][ T5345] 8021q: adding VLAN 0 to HW filter on device eth22
[  671.508257][ T5609] Bluetooth: hci1: command tx timeout
[  671.588074][ T5609] Bluetooth: hci2: command tx timeout
[  671.635436][ T5345] 8021q: adding VLAN 0 to HW filter on device eth23
[  671.784710][ T5345] 8021q: adding VLAN 0 to HW filter on device eth24
[  673.436745][ T5609] Bluetooth: hci0: command tx timeout
[  673.586835][ T5609] Bluetooth: hci1: command tx timeout
[  673.667052][ T5609] Bluetooth: hci2: command tx timeout
[  677.714460][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.719255][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.723055][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.728241][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.732107][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.736110][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.740370][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.744220][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.750045][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  677.754364][T21000] kvm: kvm [20999]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  679.102355][T21055] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  680.170213][T21078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  683.291875][T21196] kvm: apic: phys broadcast and lowest prio
[  683.890844][T21223] kvm_pr_unimpl_wrmsr: 55 callbacks suppressed
[  683.890859][T21223] kvm: kvm [21222]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0x8001
[  689.677878][T21422] kvm: kvm [21421]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  710.935982][T22007] kvm: kvm [22006]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xc
[  711.542480][T22027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  715.552212][T22085] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3682820388 (235700504832 ns) > initial count (148264767872 ns). Using initial count to start timer.
[  718.503627][T22150] kvm: user requested TSC rate below hardware speed
[  727.108399][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  727.110647][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  727.832995][T22407] kvm_pr_unimpl_wrmsr: 56 callbacks suppressed
[  727.833009][T22407] kvm_intel: kvm [22406]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  728.720526][T22437] kvm: kvm [22436]: vcpu0, guest rIP: 0x22 Unhandled WRMSR(0xc1) = 0x4a88
[  729.561527][T22463] kvm: pic: non byte read
[  729.638214][T22470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3660503500 (234272224000 ns) > initial count (178861023168 ns). Using initial count to start timer.
[  737.919346][T22707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  747.431373][T23011] KVM: debugfs: duplicate directory 23011-20
[  749.873904][T23099] kvm: pic: non byte read
[  750.415958][T23111] kvm: pic: non byte read
[  750.430718][T23111] kvm: pic: non byte write
[  753.535032][T23185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  753.784505][T23192] KVM: debugfs: duplicate directory 23192-11
[  754.875854][T23203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  757.999883][T23303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3886506761 (7773013522 ns) > initial count (4655878672 ns). Using initial count to start timer.
[  758.594479][T23316] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261128398 (68178054368 ns) > initial count (66940333104 ns). Using initial count to start timer.
[  759.929469][T23348] kvm_intel: kvm [23347]: vcpu6, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff
[  763.040495][T23447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2183035582 (8732142328 ns) > initial count (3715773136 ns). Using initial count to start timer.
[  931.003810][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  931.006150][    C1] rcu: 	1-...!: (1 GPs behind) idle=7604/1/0x4000000000000000 softirq=194762/194782 fqs=0
[  931.010008][    C1] rcu: 	(t=16339 jiffies g=146905 q=245 ncpus=2)
[  931.012853][    C1] rcu: rcu_preempt kthread starved for 16339 jiffies! g146905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  931.017686][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  931.021868][    C1] rcu: RCU grace-period kthread stack dump:
[  931.024435][    C1] task:rcu_preempt     state:R  running task     stack:27536 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  931.030096][    C1] Call Trace:
[  931.031435][    C1]  <TASK>
[  931.032619][    C1]  __schedule+0x17b4/0x5680
[  931.034233][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  931.036141][    C1]  ? __pfx___schedule+0x10/0x10
[  931.037987][    C1]  ? schedule+0x90/0x360
[  931.039474][    C1]  schedule+0x164/0x360
[  931.041202][    C1]  schedule_timeout+0x158/0x2c0
[  931.043272][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  931.045410][    C1]  ? __pfx_process_timeout+0x10/0x10
[  931.047266][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  931.049288][    C1]  ? prepare_to_swait_event+0x340/0x370
[  931.051042][    C1]  rcu_gp_fqs_loop+0x312/0x11d0
[  931.052954][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  931.055270][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  931.057541][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  931.059765][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  931.062283][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  931.064374][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  931.066598][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  931.068645][    C1]  ? __kthread_parkme+0x7a/0x1f0
[  931.070441][    C1]  ? __kthread_parkme+0x19c/0x1f0
[  931.072150][    C1]  kthread+0x388/0x470
[  931.073637][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  931.075605][    C1]  ? __pfx_kthread+0x10/0x10
[  931.077235][    C1]  ret_from_fork+0x514/0xb70
[  931.078933][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  931.080854][    C1]  ? __switch_to+0xc79/0x1410
[  931.082758][    C1]  ? __pfx_kthread+0x10/0x10
[  931.084486][    C1]  ret_from_fork_asm+0x1a/0x30
[  931.086367][    C1]  </TASK>
[  931.087697][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  931.090267][    C1] Sending NMI from CPU 1 to CPUs 0:
[  931.092492][    C0] NMI backtrace for cpu 0
[  931.092508][    C0] CPU: 0 UID: 0 PID: 20590 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  931.092520][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  931.092526][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70
[  931.092544][    C0] Code: a8 16 00 00 83 fa 02 75 21 48 8b 91 b0 16 00 00 48 8b 32 48 8d 7e 01 8b 89 ac 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <e9> cf d7 e5 09 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[  931.092553][    C0] RSP: 0018:ffffc9000342f6f8 EFLAGS: 00000293
[  931.092563][    C0] RAX: ffffffff81b9ac06 RBX: ffff88812103c148 RCX: ffff8881774aca00
[  931.092571][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  931.092578][    C0] RBP: ffffc9000342f840 R08: ffffffff9030adf7 R09: 1ffffffff20615be
[  931.092587][    C0] R10: dffffc0000000000 R11: fffffbfff20615bf R12: 1ffff110478c8169
[  931.092594][    C0] R13: dffffc0000000000 R14: ffff88823c640b48 R15: 0000000000000001
[  931.092603][    C0] FS:  0000000000000000(0000) GS:ffff88818dc8d000(0000) knlGS:0000000000000000
[  931.092612][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  931.092619][    C0] CR2: 00007f1400e47866 CR3: 00000001b329b000 CR4: 0000000000352ef0
[  931.092654][    C0] Call Trace:
[  931.092660][    C0]  <TASK>
[  931.092664][    C0]  smp_call_function_many_cond+0xfe6/0x13d0
[  931.092679][    C0]  ? smp_call_function_many_cond+0x7e1/0x13d0
[  931.092692][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  931.092711][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  931.092724][    C0]  ? rcu_is_watching+0x15/0xb0
[  931.092747][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  931.092763][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  931.092774][    C0]  kvm_flush_tlb_multi+0x2b4/0x320
[  931.092793][    C0]  ? __pfx_kvm_flush_tlb_multi+0x10/0x10
[  931.092809][    C0]  ? get_flush_tlb_info+0x171/0x260
[  931.092826][    C0]  flush_tlb_mm_range+0x5c3/0x10b0
[  931.092845][    C0]  tlb_flush_mmu+0x1af/0xa30
[  931.092862][    C0]  ? __pfx_down_write+0x10/0x10
[  931.092874][    C0]  tlb_finish_mmu+0xf9/0x230
[  931.092891][    C0]  exit_mmap+0x498/0x9e0
[  931.092905][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  931.092922][    C0]  ? uprobe_clear_state+0x53/0x3f0
[  931.092941][    C0]  ? __pfx_exit_aio+0x10/0x10
[  931.092960][    C0]  ? uprobe_clear_state+0x2bc/0x3f0
[  931.092976][    C0]  __mmput+0x118/0x430
[  931.092988][    C0]  exit_mm+0x18e/0x250
[  931.093003][    C0]  do_exit+0x6a2/0x22c0
[  931.093019][    C0]  ? __pfx_do_exit+0x10/0x10
[  931.093031][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  931.093049][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  931.093063][    C0]  do_group_exit+0x21b/0x2d0
[  931.093077][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.093089][    C0]  __x64_sys_exit_group+0x3f/0x40
[  931.093103][    C0]  x64_sys_call+0x221a/0x2240
[  931.093116][    C0]  do_syscall_64+0x15f/0xf80
[  931.093130][    C0]  ? trace_irq_disable+0x3b/0x140
[  931.093145][    C0]  ? clear_bhb_loop+0x40/0x90
[  931.093206][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.093221][    C0] RIP: 0033:0x7f14008fca90
[  931.093231][    C0] Code: Unable to access opcode bytes at 0x7f14008fca66.
[  931.093236][    C0] RSP: 002b:00007fff01c9a0f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[  931.093248][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14008fca90
[  931.093256][    C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000
[  931.093263][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 9b0597973a761cd8
[  931.093269][    C0] R10: 00000000ffffffff R11: 0000000000000202 R12: 000055a9c08771a0
[  931.093276][    C0] R13: 00007fff01c9a138 R14: 0000000000000001 R15: 000055a9c086f910
[  931.093289][    C0]  </TASK>
[  931.229507][    C1] CPU: 1 UID: 0 PID: 23549 Comm: syz.7.4357 Not tainted syzkaller #0 PREEMPT(full) 
[  931.229522][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  931.229528][    C1] RIP: 0010:vcpu_run+0x4b9c/0x7910
[  931.229543][    C1] Code: 4c 8b ac 24 38 01 00 00 4c 89 eb 48 c1 eb 03 42 0f b6 04 3b 84 c0 0f 85 da 14 00 00 41 c6 45 00 01 e8 d8 ee 85 00 fb 4c 89 f0 <48> c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d1 fe e8 00 49 ff 06
[  931.229549][    C1] RSP: 0018:ffffc9000379f5c0 EFLAGS: 00000202
[  931.229557][    C1] RAX: ffff8881067a1e50 RBX: 1ffff11020cf41a5 RCX: 0000000080000001
[  931.229562][    C1] RDX: 0000000000000006 RSI: ffffffff8dfa65b5 RDI: ffffffff8c28ade0
[  931.229566][    C1] RBP: ffffc9000379f9b0 R08: ffffffff9030adf7 R09: 1ffffffff20615be
[  931.229571][    C1] R10: dffffc0000000000 R11: fffffbfff20615bf R12: ffff8881067a0000
[  931.229576][    C1] R13: ffff8881067a0d2a R14: ffff8881067a1e50 R15: dffffc0000000000
[  931.229584][    C1] FS:  00007f2384a9a6c0(0000) GS:ffff8882a928d000(0000) knlGS:0000000000000000
[  931.229593][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  931.229598][    C1] CR2: 0000000000000000 CR3: 000000011c3cf000 CR4: 0000000000352ef0
[  931.229626][    C1] Call Trace:
[  931.229632][    C1]  <TASK>
[  931.229641][    C1]  ? vcpu_run+0x3716/0x7910
[  931.229670][    C1]  ? __pfx_vcpu_run+0x10/0x10
[  931.229680][    C1]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  931.229690][    C1]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  931.229700][    C1]  ? fpu_swap_kvm_fpstate+0xc1/0x4f0
[  931.229713][    C1]  kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0
[  931.229727][    C1]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  931.229737][    C1]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  931.229748][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  931.229757][    C1]  ? __mutex_lock+0x319/0x1550
[  931.229770][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  931.229784][    C1]  ? do_raw_write_lock+0x11d/0x260
[  931.229798][    C1]  kvm_vcpu_ioctl+0xa62/0xfd0
[  931.229814][    C1]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  931.229822][    C1]  ? do_futex+0x333/0x420
[  931.229836][    C1]  ? __fget_files+0x2a/0x420
[  931.229849][    C1]  ? __fget_files+0x2a/0x420
[  931.229856][    C1]  ? __fget_files+0x3a0/0x420
[  931.229864][    C1]  ? __fget_files+0x2a/0x420
[  931.229873][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  931.229884][    C1]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  931.229893][    C1]  __se_sys_ioctl+0xfc/0x170
[  931.229904][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.229914][    C1]  do_syscall_64+0x15f/0xf80
[  931.229928][    C1]  ? trace_irq_disable+0x3b/0x140
[  931.229943][    C1]  ? clear_bhb_loop+0x40/0x90
[  931.229951][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.229958][    C1] RIP: 0033:0x7f2383b9cdd9
[  931.229967][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  931.229972][    C1] RSP: 002b:00007f2384a9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  931.229981][    C1] RAX: ffffffffffffffda RBX: 00007f2383e15fa0 RCX: 00007f2383b9cdd9
[  931.229988][    C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  931.229994][    C1] RBP: 00007f2383c32d69 R08: 0000000000000000 R09: 0000000000000000
[  931.230001][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  931.230007][    C1] R13: 00007f2383e16038 R14: 00007f2383e15fa0 R15: 00007fffad4920c8
[  931.230024][    C1]  </TASK>
[  931.405201][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  931.407514][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  931.696005][T23571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  931.712458][T23571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  931.717257][T23571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  931.721139][T23571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  931.724986][T23571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  932.381434][T23571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  932.384548][T23571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  932.389594][T23571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  932.393405][T23571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  932.400837][T23571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  932.659479][T23577] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.661892][T23577] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.664223][T23577] bridge_slave_0: entered allmulticast mode
[  932.667213][T23577] bridge_slave_0: entered promiscuous mode
[  932.670379][T23577] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.672717][T23577] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.674957][T23577] bridge_slave_1: entered allmulticast mode
[  932.678082][T23577] bridge_slave_1: entered promiscuous mode
[  932.694228][T23577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.699222][T23577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.721606][T23577] team0: Port device team_slave_0 added
[  932.724888][T23577] team0: Port device team_slave_1 added
[  932.749222][T23577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  932.751876][T23577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  932.762843][T23577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  932.769227][T23577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  932.771975][T23577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  932.782498][T23577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  932.811372][T23577] hsr_slave_0: entered promiscuous mode
[  932.813781][T23577] hsr_slave_1: entered promiscuous mode
[  932.815919][T23577] debugfs: 'hsr0' already exists in 'hsr'
[  932.818538][T23577] Cannot create hsr debugfs directory
[  933.289903][T23577] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  933.294369][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  933.298346][T23577] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  933.303230][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  933.306180][T23577] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  933.310749][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  933.314114][T23577] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  933.318568][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  933.334107][T23577] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.336515][T23577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  933.338852][T23577] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.341322][T23577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  933.373400][T23577] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.382024][T22588] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.384771][T22588] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.391831][T23577] 8021q: adding VLAN 0 to HW filter on device team0
[  933.402056][T22588] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.404459][T22588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  933.413487][T11224] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.416257][T11224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  933.717842][T20560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.730522][T23577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  933.763289][T23577] veth0_vlan: entered promiscuous mode
[  933.769293][T23577] veth1_vlan: entered promiscuous mode
[  933.783484][T23577] veth0_macvtap: entered promiscuous mode
[  933.793645][T23577] veth1_macvtap: entered promiscuous mode
[  933.820071][T23577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  933.845389][T20560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.856667][T23577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  933.862358][T20584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  933.865417][T20584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.870122][T20584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.873079][T20584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  933.940667][T22124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  933.951721][T22124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  933.992101][T20560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.026067][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  934.029933][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  934.122872][T20560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.235504][T20560] bridge_slave_1: left allmulticast mode
[  934.238248][T20560] bridge_slave_1: left promiscuous mode
[  934.240392][T20560] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.244090][T20560] bridge_slave_0: left allmulticast mode
[  934.246744][T20560] bridge_slave_0: left promiscuous mode
[  934.249015][T20560] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.431994][T20560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  934.437201][T20560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  934.441071][T20560] bond0 (unregistering): Released all slaves
[  934.684353][T20560] hsr_slave_0: left promiscuous mode
[  934.688799][T20560] hsr_slave_1: left promiscuous mode
[  934.692162][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  934.695328][T20560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  934.701066][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  934.703901][T20560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.711270][T20560] veth1_macvtap: left promiscuous mode
[  934.713522][T20560] veth0_macvtap: left promiscuous mode
[  934.716315][T20560] veth1_vlan: left promiscuous mode
[  934.720689][T20560] veth0_vlan: left promiscuous mode
[  934.917065][T20560] team0 (unregistering): Port device team_slave_1 removed
[  934.924314][T20560] team0 (unregistering): Port device team_slave_0 removed
[  935.216174][ T5345] 8021q: adding VLAN 0 to HW filter on device eth9
[  935.412171][T20560] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.424882][ T5345] 8021q: adding VLAN 0 to HW filter on device eth10
[  935.464817][T20560] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.533764][T20560] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.596087][T20560] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.618815][ T5345] 8021q: adding VLAN 0 to HW filter on device eth11
[  935.752768][T20560] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.796257][T20560] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.809221][ T5345] 8021q: adding VLAN 0 to HW filter on device eth12
[  935.898168][T20560] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.939051][ T5345] 8021q: adding VLAN 0 to HW filter on device eth25
[  935.979609][T20560] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.061749][ T5345] 8021q: adding VLAN 0 to HW filter on device eth26
[  936.194205][T20560] bridge_slave_1: left allmulticast mode
[  936.197534][T20560] bridge_slave_1: left promiscuous mode
[  936.200138][T20560] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.212918][T20560] bridge_slave_0: left allmulticast mode
[  936.215403][T20560] bridge_slave_0: left promiscuous mode
[  936.219640][T20560] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.231831][T20560] bridge_slave_1: left allmulticast mode
[  936.234192][T20560] bridge_slave_1: left promiscuous mode
[  936.239788][T20560] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.246319][T20560] bridge_slave_0: left allmulticast mode
[  936.250335][T20560] bridge_slave_0: left promiscuous mode
[  936.252584][T20560] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.434290][T20560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  936.442187][T20560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  936.447539][T20560] bond0 (unregistering): Released all slaves
[  936.593615][T20560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  936.600797][T20560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  936.605441][T20560] bond0 (unregistering): Released all slaves
[  936.613661][ T5345] 8021q: adding VLAN 0 to HW filter on device eth27
[  936.818175][ T5345] 8021q: adding VLAN 0 to HW filter on device eth28
[  936.934283][T20560] hsr_slave_0: left promiscuous mode
[  936.942581][T20560] hsr_slave_1: left promiscuous mode
[  936.945557][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  936.951839][T20560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  936.955638][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  936.959600][T20560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  936.971817][T20560] hsr_slave_0: left promiscuous mode
[  936.974635][T20560] hsr_slave_1: left promiscuous mode
[  936.978582][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  936.981924][T20560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  936.985853][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  936.989208][T20560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  937.002331][T20560] veth1_macvtap: left promiscuous mode
[  937.004721][T20560] veth0_macvtap: left promiscuous mode
[  937.008372][T20560] veth1_vlan: left promiscuous mode
[  937.010642][T20560] veth0_vlan: left promiscuous mode
[  937.014773][T20560] veth1_macvtap: left promiscuous mode
[  937.017243][T20560] veth0_macvtap: left promiscuous mode
[  937.019827][T20560] veth1_vlan: left promiscuous mode
[  937.022294][T20560] veth0_vlan: left promiscuous mode
[  937.245775][T20560] team0 (unregistering): Port device team_slave_1 removed
[  937.264475][T20560] team0 (unregistering): Port device team_slave_0 removed
[  937.464924][T20560] team0 (unregistering): Port device team_slave_1 removed
[  937.480779][T20560] team0 (unregistering): Port device team_slave_0 removed
[  937.595013][ T5345] 8021q: adding VLAN 0 to HW filter on device eth29
[  937.839884][ T5345] 8021q: adding VLAN 0 to HW filter on device eth30
[  938.048457][ T5345] 8021q: adding VLAN 0 to HW filter on device eth31
[  938.157260][T20560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.215312][T20560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.234657][ T5345] 8021q: adding VLAN 0 to HW filter on device eth32
[  938.277598][T20560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.325755][T20560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.450005][T20560] bridge_slave_1: left allmulticast mode
[  938.453503][T20560] bridge_slave_1: left promiscuous mode
[  938.456413][T20560] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.461982][T20560] bridge_slave_0: left allmulticast mode
[  938.463863][T20560] bridge_slave_0: left promiscuous mode
[  938.465903][T20560] bridge0: port 1(bridge_slave_0) entered disabled state
[  938.570322][T20560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.576232][T20560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.581375][T20560] bond0 (unregistering): Released all slaves
[  938.642064][ T5345] 8021q: adding VLAN 0 to HW filter on device eth33
[  938.865196][T20560] hsr_slave_0: left promiscuous mode
[  938.869766][T20560] hsr_slave_1: left promiscuous mode
[  938.872690][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  938.875926][T20560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  938.887245][T20560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  938.890497][T20560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  938.900834][T20560] veth1_macvtap: left promiscuous mode
[  938.903297][T20560] veth0_macvtap: left promiscuous mode
[  938.905765][T20560] veth1_vlan: left promiscuous mode
[  938.908692][T20560] veth0_vlan: left promiscuous mode
[  939.115615][T20560] team0 (unregistering): Port device team_slave_1 removed
[  939.145143][T20560] team0 (unregistering): Port device team_slave_0 removed
[  939.273735][ T5345] 8021q: adding VLAN 0 to HW filter on device eth34
[  939.460796][ T5345] 8021q: adding VLAN 0 to HW filter on device eth35
[  939.609464][ T5345] 8021q: adding VLAN 0 to HW filter on device eth36
