last executing test programs: 7m23.408912697s ago: executing program 0 (id=281): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100026, &(0x7f0000000000)=0x10}) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000cee000/0x2000)=nil, r1, 0x1000008, 0x10, r5, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 7m23.408343017s ago: executing program 1 (id=282): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) close(r1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000380)="f30149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a3ff7fbc51869be2e2e0000000000000f000000000000000001000000000000000000000000000e00", 0x0, 0x34) ioctl$KVM_GET_SREGS(r5, 0x8000ae83, &(0x7f00000000c0)) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="7d2dc1efdad3040448f2d9d6ba35b4b13887c08574d36751dd8a48ac8353ffa036829c05b319c14b3f12d42018fff40a07737441785d0b89507decfd749c33ff1365e021c4f1ccbd", 0x0, 0x48) 7m18.391917968s ago: executing program 0 (id=283): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, 0x0, 0x40000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = eventfd2(0x1, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffe, 0xb000, 0x0, r3, 0x4fd0f096b459bd72}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000000)={0xe1}) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) 7m12.389801468s ago: executing program 1 (id=284): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000002c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000280)=0x7fffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="f30138dd56bf00e2004b584bd92e00000f00000000000100010000020000000083f402000000235acbd98700000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x40305839, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x100000000000000, 0x0}) munmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000) 7m10.461077163s ago: executing program 0 (id=285): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0, 0x1f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c8}) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0xc5c8}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r6, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000}) ioctl$KVM_CREATE_DEVICE(r13, 0xc018aec0, &(0x7f00000000c0)={0x1}) r14 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r14, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) r15 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x0, 0x1003, 0x1}}) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r16, 0x3000003, 0x2011, r6, 0x0) 7m2.92092989s ago: executing program 1 (id=286): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xea) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000200)=0x807fffe}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r5, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) 6m57.371077718s ago: executing program 0 (id=287): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x76dc8650, 0x4}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40086602, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x3, 0x95d9, 0x197}}], 0x28}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 6m55.519588607s ago: executing program 1 (id=288): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bc2000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x6}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f00000005c0)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x1e8}}, @code={0xa, 0x6c, {"0054002fc0ec83d20080b0f2a10080d2620080d2a30080d2240180d2020000d40014000f00b8205e0000008b0098207e800293d20080b8f2e10080d2c20080d2a30180d2440180d2020000d40000209b00e0200e00d8a10e"}}, @eret={0xe6, 0x18, 0x7}, @msr={0x14, 0x20, {0x603000000013df19, 0xdf6}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0xf6}}, @code={0xa, 0x9c, {"a00380d20060b0f2210180d2620080d2830080d2e40180d2020000d420159ad200e0b0f2010180d2820080d2630080d2440180d2020000d4007008d5e0c288d20040b0f2c10080d2e20180d2a30180d2840080d2020000d4000040b360b09fd20000b8f2610180d2420180d2e30080d2240080d2020000d40080000f007008d500c8302e0008202e"}}, @mrs={0xbe, 0x18, {0x603000000013df70}}, @uexit={0x0, 0x18, 0x4}, @smc={0x1e, 0x40, {0x8400000d, [0x40, 0x1, 0x4, 0x3, 0x3]}}, @irq_setup={0x46, 0x18, {0x2, 0x32d}}, @eret={0xe6, 0x18, 0x81}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x3ce}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x358}}, @code={0xa, 0x9c, {"0000805a0074200e007008d51f0000ea007008d5a0f18dd200e0b8f2e10080d2c20180d2430180d2c40080d2020000d4c0c18ad200e0b8f2210080d2020080d2a30080d2640180d2020000d4000cc01aa0a98bd200e0b0f2210180d2620080d2230080d2c40180d2020000d4208a8bd20080b0f2a10180d2020180d2a30080d2840080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0x4, 0x1000, 0xfffffffd, 0x1}}, @svc={0x122, 0x40, {0xc4000010, [0x3797, 0x2, 0xe25, 0xafc0]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x5, 0x1, 0x6, 0x800, 0x3, 0x2}}, @code={0xa, 0x6c, {"007008d5007008d5007983d200c0b8f2e10180d2820080d2430080d2640080d2020000d460e593d20000b8f2610080d2020080d2430080d2440080d2020000d4000008d50000805a0090807f0048202e000008d5007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfe64, 0x9}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x34d}}, @irq_setup={0x46, 0x18, {0x1, 0x34}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x298}}, @irq_setup={0x46, 0x18, {0x3, 0x377}}], 0x4c8}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m45.950218396s ago: executing program 1 (id=289): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000002c0)={0x2, 0x4, 0x3000, 0x1000, &(0x7f0000d12000/0x1000)=nil, 0x8000}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4360ae82, &(0x7f00000000c0)={[0xa9, 0x2, 0x3, 0x401, 0x1, 0x2, 0xffffffffffff6eab, 0x1, 0x8, 0x9, 0x5, 0x7f, 0x0, 0x4, 0x0, 0x2], 0x10000, 0x40}) 6m45.730308212s ago: executing program 0 (id=290): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x6030000000138027}}, @smc={0x1e, 0x40, {0x80000002, [0x2, 0x2, 0x80, 0x7fffffff, 0x200]}}, @its_setup={0x82, 0x28, {0x2, 0x2, 0x284}}, @code={0xa, 0x6c, {"007008d500a8212e008008d50040df0d000c95d20060b8f2a10080d2020080d2630080d2c40180d2020000d4803687d20040b0f2010080d2420080d2430180d2640080d2020000d40000c039000028d500c0c00d00a4df0d"}}, @msr={0x14, 0x20, {0x603000000013f102, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf00, 0xffffffffffffff7b, 0x15}}, @svc={0x122, 0x40, {0xc4000003, [0xffffffffffff0000, 0x9, 0x7f21, 0x0, 0x4]}}, @smc={0x1e, 0x40, {0x80003fff, [0x4, 0x100, 0xfffffffffffffffd, 0x5, 0x6]}}, @irq_setup={0x46, 0x18, {0x1, 0x17f}}, @msr={0x14, 0x20, {0x603000000013c02c, 0x40}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x14, 0x4, 0x2}}, @svc={0x122, 0x40, {0x3000000, [0x1, 0x9, 0x1, 0xba, 0x400]}}, @msr={0x14, 0x20, {0x603000000013dcf3, 0x6}}, @mrs={0xbe, 0x18, {0x603000000013dee4}}, @msr={0x14, 0x20, {0x6030000000138032, 0x5}}, @irq_setup={0x46, 0x18, {0x4, 0xa6}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x0, 0x7, 0x9, 0x4, 0x1}}, @code={0xa, 0xb4, {"0000807200d295d200e0b0f2610080d2a20080d2c30180d2e40180d2020000d4001ca00ee02f92d20020b8f2010180d2e20180d2e30180d2c40080d2020000d4a0a08ad20040b0f2a10180d2620080d2e30080d2a40080d2020000d4a02696d20040b0f2010080d2820080d2230080d2440080d2020000d4000440fc007008d50058202e40039cd200a0b0f2a10080d2420080d2430080d2040180d2020000d4"}}, @eret={0xe6, 0x18, 0x3}, @svc={0x122, 0x40, {0x84000051, [0x400, 0xfff, 0x2, 0x9, 0x800]}}, @uexit={0x0, 0x18, 0x3ff}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x6, 0x7, 0xd8, 0x3}}, @code={0xa, 0x84, {"000008d5804083d200e0b8f2c10080d2220180d2e30180d2440080d2020000d4008008d5000028d5a0878bd200c0b0f2a10180d2020080d2c30180d2040180d2020000d4008c007f007008d5008008d5206999d200c0b0f2410180d2820180d2c30080d2c40080d2020000d4007008d5"}}, @code={0xa, 0x84, {"000080380000003c007008d5000028d5e03696d200a0b8f2610080d2e20080d2e30080d2040080d2020000d4c03a8dd200c0b0f2610080d2420180d2430180d2640180d2020000d4a0ee96d200a0b0f2a10080d2820080d2a30080d2040080d2020000d40200a0d400c8b02e000028d5"}}, @uexit={0x0, 0x18, 0x401}], 0x568}, &(0x7f00000005c0)=[@featur1={0x1, 0xa0}], 0x1) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000600)={0xd, "e7183d34d414180c4de2bd2282"}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000640)=0x8) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r1, 0x800005, 0x7401298ab8074ef7, r0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000680)=@arm64={0x8, 0x9, 0x1, '\x00', 0x7fffffff}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8360ae81, &(0x7f00000006c0)) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000780)=@attr_pmu_init) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000007c0)={0xdf, 0x0, 0x3000}) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000880)=@riscv64_timer={0x8030000004000001, &(0x7f0000000840)=0x9}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f00000008c0)) mmap$KVM_VCPU(&(0x7f0000e6a000/0x4000)=nil, r1, 0x1000004, 0x12, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000da9000/0x2000)=nil, r1, 0x1000000, 0x1010, r0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f0000000940)={0x30003, 0x0, {[0x41acc5d000000000, 0xffff, 0x2, 0x8001, 0x80, 0x3, 0x4df, 0x2, 0xfffffffffffffffc, 0x90, 0x9, 0x8, 0xbbd, 0x2, 0x2, 0x4], [0x3, 0x32, 0x8, 0x7fffffff, 0x73, 0x371f, 0x100000001, 0x6, 0x2, 0x7, 0x3610, 0x6, 0x100000001, 0xf, 0x200, 0xff], [0xf5, 0x7, 0x33d, 0xf, 0xfffffffffffffffc, 0x7, 0x4, 0x110, 0x7, 0x1, 0x7fffffffffffffff, 0x9, 0x8a0, 0x7, 0x4, 0x7fffffff], [0x8, 0xffffffffffffc8b4, 0xfffffffffffffffc, 0x5, 0x7e, 0x7fffffff, 0x9, 0x6, 0x5, 0x7ff, 0x5, 0x8, 0x4, 0x127, 0x4, 0x200]}}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000f00)={0x0, &(0x7f0000000b80)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0x11}}, @memwrite={0x6e, 0x30, @generic={0x4000, 0xcc2, 0x9, 0xb}}, @hvc={0x32, 0x40, {0x84000000, [0xffffffffffff72c9, 0x7f, 0xffe, 0x0, 0x1]}}, @svc={0x122, 0x40, {0xc4001010, [0x2, 0x928, 0x2, 0x3, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x3, 0x4}}, @eret={0xe6, 0x18, 0x5}, @code={0xa, 0x54, {"60f091d200e0b0f2610080d2220080d2430080d2e40080d2020000d400e0df0d0028c01a000028d50004006e0084200d008008d5000008d5030000d40040671e"}}, @svc={0x122, 0x40, {0x84000005, [0x5, 0x3, 0x3, 0x99, 0x1]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x3ba}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff8, 0x6, 0x5}}, @smc={0x1e, 0x40, {0x84000010, [0x3, 0x8, 0x8000, 0x3, 0x73]}}, @smc={0x1e, 0x40, {0x84000051, [0x1, 0x10, 0xf31c, 0x4]}}, @hvc={0x32, 0x40, {0x84000052, [0xde0, 0x5, 0x6, 0x7fffffffffffffff, 0x7fffffff]}}, @svc={0x122, 0x40, {0x1, [0x2, 0x3, 0x3ab3, 0x8b, 0xffffffff]}}, @svc={0x122, 0x40, {0x84000002, [0x80aa, 0x8, 0xc0000, 0x9, 0x40]}}, @mrs={0xbe, 0x18, {0x603000000013c024}}], 0x364}, &(0x7f0000000f40)=[@featur2={0x1, 0x94}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000f80)={0x2d, 0x3}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000fc0)={0xdddd1000, 0xffffffff, 0x661f, 0x0, 0xe3b8}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8360ae81, &(0x7f0000001000)) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000010c0)={0xffffffff}) syz_kvm_setup_cpu$arm64(r2, r5, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001240)=[{0x0, &(0x7f0000001100)=[@smc={0x1e, 0x40, {0x84000002, [0x2, 0x2, 0x4, 0x9]}}, @eret={0xe6, 0x18}, @svc={0x122, 0x40, {0x40, [0x8b8, 0x4, 0x9, 0x0, 0x200]}}, @eret={0xe6, 0x18, 0x10001}, @uexit={0x0, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x190}}, @eret={0xe6, 0x18, 0x2}], 0x108}], 0x1, 0x0, &(0x7f0000001280)=[@featur1={0x1, 0x3d}], 0x1) r6 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) 6m37.943964316s ago: executing program 0 (id=291): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x1, 0x6}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0xdddd1000, 0x0, 0x1}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0xffff8001, 0x200, 0x7}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f00000000c0)={0x5, 0x7}) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0xeeef0000, 0x110000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)={0x7fffffff, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x1000000, 0x110, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x2}}) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x2}}) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000380)=[{0x0, &(0x7f0000000340)=[@eret={0xe6, 0x18, 0x61}], 0x18}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x1a}], 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000400)={0x4, 0x8000}) (async) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000400)={0x4, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x5, 0xf000, 0x1000, &(0x7f0000cdd000/0x1000)=nil, 0x400, r5}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x5, 0xf000, 0x1000, &(0x7f0000cdd000/0x1000)=nil, 0x400, r5}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000500)={0xa000, 0xffff1000, 0x3, 0x0, 0x7ff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) eventfd2(0x71, 0x80000) (async) r7 = eventfd2(0x71, 0x80000) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000540)={0x101, 0x8000000, 0xb, r7, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000005c0)=@riscv64_d={0x8030000006000018, &(0x7f0000000580)=0x5}) (async) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000005c0)=@riscv64_d={0x8030000006000018, &(0x7f0000000580)=0x5}) ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000600)) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000680)={r7, 0xffff0001, 0x1, r7}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000db8000/0x2000)=nil, r9, 0x1000004, 0x110, r2, 0x0) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000740)) eventfd2(0x7ff, 0x801) (async) eventfd2(0x7ff, 0x801) 6m34.423783522s ago: executing program 1 (id=292): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x9, 0x10003, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x2}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x4, 0x220) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x25) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, &(0x7f0000000100), 0xfffffffffffffff7}, 0x0, 0xfffffffffffffce4) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000140)={0x10004, 0x240, 0x200, &(0x7f0000000240)=[0x5, 0x80, 0x1, 0x5c23, 0xc, 0xff, 0x0, 0x2, 0x567d21da, 0x8, 0x7ff, 0x1, 0xffff, 0x3, 0x49, 0x36f3, 0x0, 0x2, 0x2, 0x8000, 0x2000000000, 0x4, 0x8d8, 0x5, 0x1, 0x8, 0x0, 0xb, 0x3, 0xc, 0x5, 0x8, 0x0, 0x5, 0x396f, 0x10000, 0x3, 0xfffffffffffffffd, 0x2, 0x9, 0x4, 0xa, 0xa303, 0x8, 0x7, 0x2, 0x8001, 0x0, 0xfffffffffffff425, 0x6, 0x400000, 0x9, 0x491, 0xffffffffffffffff, 0x944c, 0x9, 0x5, 0x32213938, 0x9, 0x44e2, 0x7e, 0x0, 0x4, 0x100000000, 0xd81c, 0xbf, 0x7, 0x2db, 0x0, 0x4, 0x9, 0x2, 0x200, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x94b, 0x8, 0x47e, 0x1000, 0x1, 0xef5a, 0x2, 0x0, 0x3, 0x2, 0x100000000, 0x101, 0xffffffffffffffff, 0x15, 0x101, 0x6, 0x8, 0x9, 0x740, 0x5, 0x3, 0x0, 0x0, 0x1, 0x401, 0xffffffffffffffff, 0x5, 0x6, 0x1, 0x1, 0x9, 0x9, 0x400, 0x6, 0xd3f, 0x3, 0x3, 0x7, 0x5, 0x2, 0x200, 0xe89, 0x4464, 0x9, 0x1, 0x8000000000000000, 0xfffffffffffffffb, 0x7, 0x101, 0x4, 0x9]}) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r14, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r15, 0xae04) mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r16, 0x2000009, 0x213011, r14, 0x0) mmap$KVM_VCPU(&(0x7f0000c43000/0x4000)=nil, r16, 0x3000002, 0x810, r9, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5m51.610614355s ago: executing program 32 (id=291): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x1, 0x6}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0xdddd1000, 0x0, 0x1}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0xffff8001, 0x200, 0x7}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f00000000c0)={0x5, 0x7}) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0xeeef0000, 0x110000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)={0x7fffffff, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x1000000, 0x110, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x2}}) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x2}}) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000380)=[{0x0, &(0x7f0000000340)=[@eret={0xe6, 0x18, 0x61}], 0x18}], 0x1, 0x0, &(0x7f00000003c0)=[@featur2={0x1, 0x1a}], 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000400)={0x4, 0x8000}) (async) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000400)={0x4, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x5, 0xf000, 0x1000, &(0x7f0000cdd000/0x1000)=nil, 0x400, r5}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000440)={0x10003, 0x5, 0xf000, 0x1000, &(0x7f0000cdd000/0x1000)=nil, 0x400, r5}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000500)={0xa000, 0xffff1000, 0x3, 0x0, 0x7ff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) eventfd2(0x71, 0x80000) (async) r7 = eventfd2(0x71, 0x80000) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000540)={0x101, 0x8000000, 0xb, r7, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000005c0)=@riscv64_d={0x8030000006000018, &(0x7f0000000580)=0x5}) (async) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000005c0)=@riscv64_d={0x8030000006000018, &(0x7f0000000580)=0x5}) ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000600)) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000680)={r7, 0xffff0001, 0x1, r7}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000db8000/0x2000)=nil, r9, 0x1000004, 0x110, r2, 0x0) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000740)) eventfd2(0x7ff, 0x801) (async) eventfd2(0x7ff, 0x801) 5m46.63347633s ago: executing program 33 (id=292): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x9, 0x10003, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x2}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x4, 0x220) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x25) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000000)={0x0, &(0x7f0000000100), 0xfffffffffffffff7}, 0x0, 0xfffffffffffffce4) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CLEAR_DIRTY_LOG(r11, 0xc018aec0, &(0x7f0000000140)={0x10004, 0x240, 0x200, &(0x7f0000000240)=[0x5, 0x80, 0x1, 0x5c23, 0xc, 0xff, 0x0, 0x2, 0x567d21da, 0x8, 0x7ff, 0x1, 0xffff, 0x3, 0x49, 0x36f3, 0x0, 0x2, 0x2, 0x8000, 0x2000000000, 0x4, 0x8d8, 0x5, 0x1, 0x8, 0x0, 0xb, 0x3, 0xc, 0x5, 0x8, 0x0, 0x5, 0x396f, 0x10000, 0x3, 0xfffffffffffffffd, 0x2, 0x9, 0x4, 0xa, 0xa303, 0x8, 0x7, 0x2, 0x8001, 0x0, 0xfffffffffffff425, 0x6, 0x400000, 0x9, 0x491, 0xffffffffffffffff, 0x944c, 0x9, 0x5, 0x32213938, 0x9, 0x44e2, 0x7e, 0x0, 0x4, 0x100000000, 0xd81c, 0xbf, 0x7, 0x2db, 0x0, 0x4, 0x9, 0x2, 0x200, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x94b, 0x8, 0x47e, 0x1000, 0x1, 0xef5a, 0x2, 0x0, 0x3, 0x2, 0x100000000, 0x101, 0xffffffffffffffff, 0x15, 0x101, 0x6, 0x8, 0x9, 0x740, 0x5, 0x3, 0x0, 0x0, 0x1, 0x401, 0xffffffffffffffff, 0x5, 0x6, 0x1, 0x1, 0x9, 0x9, 0x400, 0x6, 0xd3f, 0x3, 0x3, 0x7, 0x5, 0x2, 0x200, 0xe89, 0x4464, 0x9, 0x1, 0x8000000000000000, 0xfffffffffffffffb, 0x7, 0x101, 0x4, 0x9]}) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r14, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r15, 0xae04) mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r16, 0x2000009, 0x213011, r14, 0x0) mmap$KVM_VCPU(&(0x7f0000c43000/0x4000)=nil, r16, 0x3000002, 0x810, r9, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 52.773271772s ago: executing program 2 (id=293): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x18a83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x44, 0x220) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r14 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x40000004}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r18 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r17, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r18, 0x2000000, 0x14012, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r19 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r19, 0x4004ae99, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x1, 0xffff1000, 0x2000, &(0x7f000003d000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) 47.831832403s ago: executing program 3 (id=294): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r12 = eventfd2(0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000700)={0x7, 0x0}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r14, 0x4008ae61, &(0x7f0000000240)={0x200002f}) close(r12) 5.497407179s ago: executing program 34 (id=293): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x18a83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x44, 0x220) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r14 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x40000004}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r18 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r17, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r18, 0x2000000, 0x14012, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r19 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r19, 0x4004ae99, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x1, 0xffff1000, 0x2000, &(0x7f000003d000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) 0s ago: executing program 35 (id=294): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_add_vcpu$arm64(r3, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r12 = eventfd2(0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000700)={0x7, 0x0}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r14, 0x4008ae61, &(0x7f0000000240)={0x200002f}) close(r12) kernel console output (not intermixed with test programs): [ 416.782848][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.457151][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:17798' (ED25519) to the list of known hosts. [ 651.233120][ T25] audit: type=1400 audit(650.430:61): avc: denied { name_bind } for pid=3332 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 652.152393][ T25] audit: type=1400 audit(651.360:62): avc: denied { execute } for pid=3333 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 652.173920][ T25] audit: type=1400 audit(651.380:63): avc: denied { execute_no_trans } for pid=3333 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 676.472455][ T25] audit: type=1400 audit(675.680:64): avc: denied { mounton } for pid=3333 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 676.530823][ T25] audit: type=1400 audit(675.730:65): avc: denied { mount } for pid=3333 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 676.622962][ T3333] cgroup: Unknown subsys name 'net' [ 676.703153][ T25] audit: type=1400 audit(675.910:66): avc: denied { unmount } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 677.224051][ T3333] cgroup: Unknown subsys name 'cpuset' [ 677.371160][ T3333] cgroup: Unknown subsys name 'rlimit' [ 678.394973][ T25] audit: type=1400 audit(677.600:67): avc: denied { setattr } for pid=3333 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.415366][ T25] audit: type=1400 audit(677.620:68): avc: denied { mounton } for pid=3333 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 678.442841][ T25] audit: type=1400 audit(677.640:69): avc: denied { mount } for pid=3333 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 679.525609][ T3337] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 679.553816][ T25] audit: type=1400 audit(678.750:70): avc: denied { relabelto } for pid=3337 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 679.579151][ T25] audit: type=1400 audit(678.780:71): avc: denied { write } for pid=3337 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 679.786362][ T25] audit: type=1400 audit(678.990:72): avc: denied { read } for pid=3333 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 679.814458][ T25] audit: type=1400 audit(679.010:73): avc: denied { open } for pid=3333 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 679.860533][ T3333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 739.097035][ T25] audit: type=1400 audit(738.300:74): avc: denied { execmem } for pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 743.054679][ T25] audit: type=1400 audit(742.260:75): avc: denied { read } for pid=3340 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 743.099776][ T25] audit: type=1400 audit(742.290:76): avc: denied { open } for pid=3341 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 743.149218][ T25] audit: type=1400 audit(742.350:77): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 743.377379][ T25] audit: type=1400 audit(742.580:78): avc: denied { module_request } for pid=3340 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 744.442885][ T25] audit: type=1400 audit(743.640:79): avc: denied { sys_module } for pid=3341 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 773.231761][ T3340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.753727][ T3340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.881609][ T3341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.722958][ T3341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.680315][ T3340] hsr_slave_0: entered promiscuous mode [ 786.709473][ T3340] hsr_slave_1: entered promiscuous mode [ 787.594806][ T3341] hsr_slave_0: entered promiscuous mode [ 787.632846][ T3341] hsr_slave_1: entered promiscuous mode [ 787.662697][ T3341] debugfs: 'hsr0' already exists in 'hsr' [ 787.666750][ T3341] Cannot create hsr debugfs directory [ 793.922625][ T25] audit: type=1400 audit(793.120:80): avc: denied { create } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 793.950144][ T25] audit: type=1400 audit(793.150:81): avc: denied { write } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 794.050345][ T25] audit: type=1400 audit(793.210:82): avc: denied { read } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 794.209107][ T3340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.552636][ T3340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.830077][ T3340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 795.242456][ T3340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 796.930300][ T3341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 797.217197][ T3341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 797.443113][ T3341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 797.596169][ T3341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 810.566714][ T3340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.332150][ T3341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.950803][ T3340] veth0_vlan: entered promiscuous mode [ 871.425489][ T3340] veth1_vlan: entered promiscuous mode [ 873.746704][ T3341] veth0_vlan: entered promiscuous mode [ 873.994384][ T3340] veth0_macvtap: entered promiscuous mode [ 874.592445][ T3340] veth1_macvtap: entered promiscuous mode [ 874.702251][ T3341] veth1_vlan: entered promiscuous mode [ 877.326023][ T3387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.492845][ T3387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.678944][ T3387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.686126][ T3387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.032258][ T3341] veth0_macvtap: entered promiscuous mode [ 878.575304][ T3341] veth1_macvtap: entered promiscuous mode [ 881.156983][ T25] audit: type=1400 audit(880.360:83): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 881.539181][ T25] audit: type=1400 audit(880.710:84): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.tUnaA6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 882.012052][ T25] audit: type=1400 audit(881.210:85): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 882.593666][ T25] audit: type=1400 audit(881.800:86): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.tUnaA6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 882.753164][ T25] audit: type=1400 audit(881.960:87): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.tUnaA6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 882.885880][ T3387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.945628][ T3387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.017128][ T3387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.169694][ T3387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.942014][ T25] audit: type=1400 audit(883.130:88): avc: denied { unmount } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 884.355916][ T25] audit: type=1400 audit(883.520:89): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 884.450037][ T25] audit: type=1400 audit(883.650:90): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="gadgetfs" ino=3775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 884.790194][ T25] audit: type=1400 audit(883.990:91): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 884.919479][ T25] audit: type=1400 audit(884.120:92): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 886.891999][ T3340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 888.599668][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 888.605009][ T25] audit: type=1400 audit(887.800:94): avc: denied { read write } for pid=3340 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 888.644600][ T25] audit: type=1400 audit(887.830:95): avc: denied { open } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 888.759405][ T25] audit: type=1400 audit(887.960:96): avc: denied { ioctl } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 901.255405][ T25] audit: type=1400 audit(900.350:97): avc: denied { read } for pid=3493 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 901.329248][ T25] audit: type=1400 audit(900.520:98): avc: denied { open } for pid=3493 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 902.106666][ T25] audit: type=1400 audit(901.310:99): avc: denied { ioctl } for pid=3493 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 915.111720][ T25] audit: type=1400 audit(914.320:100): avc: denied { write } for pid=3503 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 915.551243][ T25] audit: type=1400 audit(914.630:101): avc: denied { map } for pid=3503 comm="syz.0.3" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 938.974728][ T25] audit: type=1400 audit(938.180:102): avc: denied { execute } for pid=3517 comm="syz.1.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 958.891493][ T25] audit: type=1400 audit(958.090:103): avc: denied { append } for pid=3524 comm="syz.1.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1052.609691][ T25] audit: type=1400 audit(1051.810:104): avc: denied { map } for pid=3584 comm="syz.0.28" path="pipe:[2771]" dev="pipefs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1078.513298][ T25] audit: type=1400 audit(1077.660:105): avc: denied { create } for pid=3601 comm="syz.0.34" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1078.725943][ T25] audit: type=1400 audit(1077.930:106): avc: denied { map } for pid=3601 comm="syz.0.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1078.855203][ T25] audit: type=1400 audit(1077.990:107): avc: denied { read } for pid=3601 comm="syz.0.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1079.297100][ T25] audit: type=1400 audit(1078.480:108): avc: denied { write } for pid=3601 comm="syz.0.34" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=5548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1368.432654][ T25] audit: type=1400 audit(1367.630:109): avc: denied { ioctl } for pid=3776 comm="syz.1.84" path="net:[4026532624]" dev="nsfs" ino=4026532624 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1384.833274][ T25] audit: type=1400 audit(1384.020:110): avc: denied { setattr } for pid=3786 comm="syz.1.86" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1401.900406][ T3794] kvm [3794]: Failed to find VMA for hva 0x20c00000 [ 1616.579332][ T25] audit: type=1400 audit(1615.780:111): avc: denied { execute } for pid=3903 comm="syz.0.120" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1944.693369][ T25] audit: type=1400 audit(1943.890:112): avc: denied { ioctl } for pid=4074 comm="syz.1.172" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=12698 ioctlcmd=0xaeae scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2167.674848][ T4206] kvm [4206]: Failed to find VMA for hva 0x20c01000 [ 2226.042787][ T25] audit: type=1400 audit(2225.210:113): avc: denied { execute } for pid=4231 comm="syz.0.221" path=2F3131302FFF67521CD66F8F1F447D3570707CD24B7EEBB207 dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2765.071449][ T4461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2765.451161][ T4461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2771.005229][ T4464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2771.296285][ T4464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2792.310478][ T4461] hsr_slave_0: entered promiscuous mode [ 2792.461412][ T4461] hsr_slave_1: entered promiscuous mode [ 2792.540110][ T4461] debugfs: 'hsr0' already exists in 'hsr' [ 2792.543790][ T4461] Cannot create hsr debugfs directory [ 2797.203972][ T4464] hsr_slave_0: entered promiscuous mode [ 2797.243718][ T4464] hsr_slave_1: entered promiscuous mode [ 2797.302372][ T4464] debugfs: 'hsr0' already exists in 'hsr' [ 2797.311078][ T4464] Cannot create hsr debugfs directory [ 2811.926100][ T4461] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2812.842120][ T4461] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2813.520257][ T4461] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2814.051816][ T4461] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2820.440219][ T4464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2820.972454][ T4464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2821.460847][ T4464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2822.210839][ T4464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2850.343666][ T4461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2854.546452][ T4464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2968.487040][ T4461] veth0_vlan: entered promiscuous mode [ 2969.302402][ T4461] veth1_vlan: entered promiscuous mode [ 2972.892383][ T4464] veth0_vlan: entered promiscuous mode [ 2974.072778][ T4461] veth0_macvtap: entered promiscuous mode [ 2974.643198][ T4464] veth1_vlan: entered promiscuous mode [ 2975.195296][ T4461] veth1_macvtap: entered promiscuous mode [ 2979.971369][ T21] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2979.976831][ T21] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.006792][ T21] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.081024][ T4464] veth0_macvtap: entered promiscuous mode [ 2980.332323][ T4427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2981.127226][ T4464] veth1_macvtap: entered promiscuous mode [ 2986.643929][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2986.661828][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2986.699580][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2986.703285][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3092.471084][ T27] INFO: task syz.1.292:4456 blocked for more than 430 seconds. [ 3092.499592][ T27] Not tainted syzkaller #0 [ 3092.514660][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3092.521394][ T27] task:syz.1.292 state:D stack:0 pid:4456 tgid:4456 ppid:3340 task_flags:0x400040 flags:0x00000011 [ 3092.522626][ T27] Call trace: [ 3092.522956][ T27] __switch_to+0x584/0xb00 (T) [ 3092.525498][ T27] __schedule+0x200c/0x3428 [ 3092.525928][ T27] schedule+0xac/0x27c [ 3092.526227][ T27] schedule_timeout+0x68/0x1ec [ 3092.526574][ T27] do_wait_for_common+0x28c/0x440 [ 3092.526908][ T27] wait_for_completion+0x44/0x5c [ 3092.527204][ T27] __synchronize_srcu+0x2a4/0x320 [ 3092.659742][ T27] synchronize_srcu+0x3d0/0x4f8 [ 3092.660824][ T27] mmu_notifier_unregister+0x320/0x428 [ 3092.661430][ T27] kvm_put_kvm+0x698/0xbe0 [ 3092.661876][ T27] kvm_vm_release+0x58/0x78 [ 3092.662334][ T27] __fput+0x4ac/0x978 [ 3092.662788][ T27] ____fput+0x20/0x58 [ 3092.663207][ T27] task_work_run+0x1b8/0x250 [ 3092.663691][ T27] exit_to_user_mode_loop+0x110/0x188 [ 3092.664174][ T27] el0_svc+0x17c/0x238 [ 3092.664712][ T27] el0t_64_sync_handler+0x84/0x12c [ 3092.665207][ T27] el0t_64_sync+0x198/0x19c [ 3092.666866][ T27] [ 3092.666866][ T27] Showing all locks held in the system: [ 3092.667371][ T27] 3 locks held by kworker/u4:1/21: SYZFAIL: failed to recv rpc [ 3092.751715][ T27] #0: fff0000072d59ed8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x368/0x3428 [ 3092.761438][ T27] #1: fff0000072d45588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x6c/0x6e8 [ 3092.763185][ T27] #2: fff0000072d46e98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x5c8/0xe7c [ 3092.765126][ T27] 1 lock held by khungtaskd/27: [ 3092.765512][ T27] #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 3092.767399][ T27] 2 locks held by getty/3200: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3092.860756][ T27] #0: 36f00000123228a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 3092.914839][ T27] #1: 3eff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234 [ 3092.916665][ T27] 1 lock held by sshd-session/3332: [ 3092.917011][ T27] 2 locks held by syz-executor/3333: [ 3092.917321][ T27] 2 locks held by kworker/u4:3/3371: [ 3092.954599][ T27] 3 locks held by kworker/u4:9/3446: [ 3092.959658][ T27] 2 locks held by kworker/0:6/3491: [ 3092.960112][ T27] 3 locks held by kworker/u4:4/4427: [ 3092.960469][ T27] 2 locks held by syz.0.291/4453: [ 3092.960856][ T27] 1 lock held by syz-executor/4627: [ 3092.961174][ T27] 3 locks held by syz-executor/4631: [ 3092.961672][ T27] [ 3092.961963][ T27] ============================================= [ 3092.961963][ T27] [ 3092.962907][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 3092.970945][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 3092.972278][ T27] Hardware name: linux,dummy-virt (DT) [ 3092.973136][ T27] Call trace: [ 3092.973936][ T27] show_stack+0x2c/0x3c (C) [ 3092.974912][ T27] __dump_stack+0x30/0x40 [ 3092.975855][ T27] dump_stack_lvl+0x30/0x12c [ 3092.976762][ T27] dump_stack+0x1c/0x28 [ 3092.977630][ T27] vpanic+0x1d4/0x4e4 [ 3092.978300][ T27] vpanic+0x0/0x4e4 [ 3092.979056][ T27] hung_task_panic+0x0/0x2c [ 3092.979944][ T27] kthread+0x794/0x99c [ 3092.980835][ T27] ret_from_fork+0x10/0x20 [ 3092.982659][ T27] Kernel Offset: disabled [ 3092.983352][ T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f [ 3092.984400][ T27] Memory Limit: none [ 3092.986593][ T27] Rebooting in 86400 seconds..