last executing test programs: 1h0m3.419735753s ago: executing program 1 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2000000002, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x700) 59m55.9815734s ago: executing program 0 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000d70000/0x3000)=nil, 0x3000) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r5 = eventfd2(0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x1000004, 0x11, r5, 0x0) r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f0000000040)}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r7 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x8040aeb6, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 59m55.06284961s ago: executing program 1 (id=601): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x52) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000180)=0x4}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 59m44.110037252s ago: executing program 1 (id=602): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xf) ioctl$KVM_GET_REGS(r0, 0x8360ae81, &(0x7f0000000000)) 59m43.40399877s ago: executing program 0 (id=603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10}) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x4, 0x1, &(0x7f00000000c0)=0x8}) (async, rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x8, 0x4, 0x0}) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0x80111500, 0xfffffffffffff000) 59m38.711631988s ago: executing program 1 (id=604): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4d) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0xfffffdd3, @generic={0x4000, 0x5ad, 0x9, 0x4}}, @smc={0x1e, 0x0, {0x84000000, [0x7, 0xe, 0x2f1a, 0xbba, 0x6]}}], 0x58}, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x2}) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000003c0)}, &(0x7f0000000300)=[@featur2={0x1, 0xb0}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000380)=0x7}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0xfffffffffffffffe, 0x0, 0xfffffffffffffee9) r10 = ioctl$KVM_CREATE_VM(r9, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r10, 0x541b, 0x2004001f) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x0, 0x3000005, 0x4010, r11, 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000a5a000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0xcb3993e4c7433bb8, 0xffffffffffffffff, 0x0) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0x100000002, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = syz_kvm_vgic_v3_setup(r2, 0x0, 0x3a0) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000100)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x5, 0x25000, 0x2000, &(0x7f0000c2f000/0x2000)=nil}) 59m34.834701562s ago: executing program 0 (id=605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2000000002, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x804) 59m27.371312454s ago: executing program 1 (id=606): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) close(r3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x57fd, 0x2}}) 59m26.449173344s ago: executing program 0 (id=607): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) close(r2) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x6}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) (async) close(r2) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x6}) (async) 59m17.094226222s ago: executing program 1 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000001c0)=@arm64_extra={0x603000000013c036, &(0x7f0000000180)=0x78b}) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x9, 0xb4, 0x100, 0x6, 0x88]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x6, 0x8, 0x102}}], 0x68}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r7, 0x4, 0x220) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x8ea, 0xa420, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0x10, 0x10000, 0x0, 0x40000004}}], 0xa6}, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000000, [0x40000099a, 0x5cf, 0xaca, 0x6, 0x1]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r15 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r18 = syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil) r19 = syz_kvm_add_vcpu$arm64(r18, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r19, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010004c, &(0x7f0000000240)=0x2}) (async) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x2}) 59m16.464026456s ago: executing program 0 (id=609): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f00000000c0)=0xf}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) close(0x5) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, 0x0) 59m0.202402838s ago: executing program 0 (id=610): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f00000001c0)=0xc}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454c8, 0x1) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) 58m30.790030598s ago: executing program 32 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000001c0)=@arm64_extra={0x603000000013c036, &(0x7f0000000180)=0x78b}) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x9, 0xb4, 0x100, 0x6, 0x88]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x6, 0x8, 0x102}}], 0x68}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r7, 0x4, 0x220) (async) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@memwrite={0x6e, 0x30, @generic={0x8000000, 0x8ea, 0xa420, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x0, 0x10, 0x10000, 0x0, 0x40000004}}], 0xa6}, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000000, [0x40000099a, 0x5cf, 0xaca, 0x6, 0x1]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r15 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r18 = syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil) r19 = syz_kvm_add_vcpu$arm64(r18, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r19, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x603000000010004c, &(0x7f0000000240)=0x2}) (async) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x2}) 58m13.100782669s ago: executing program 33 (id=610): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f00000001c0)=0xc}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454c8, 0x1) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) 51m45.189406479s ago: executing program 2 (id=622): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x1010, r7, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000001) r10 = eventfd2(0x8801, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r10, 0x5, 0x2}) r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dcea, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c013, 0x8000}}], 0x40}, &(0x7f0000000300)=[@featur2={0x1, 0x90}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0xd1, 0xf541, 0x1}}) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000000c0)=@arm64_ccsidr={0x602000000011000a, &(0x7f0000000080)=0x81}) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r12, 0x0, 0xffffffffffffffff) 51m39.295695549s ago: executing program 3 (id=623): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r1, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r1, 0x100000a, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) 51m27.564551966s ago: executing program 3 (id=624): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x2}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x3c0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0xc, &(0x7f00000001c0)=0x4}) 51m27.359154899s ago: executing program 2 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8000000000004) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000a5a000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x200000, 0x37d03030d7a90616, 0x9}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0xdddd1000, 0x1000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000080)={0x1}) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x38c42, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x3, 0x1000, 0x40000000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) r13 = syz_kvm_vgic_v3_setup(r10, 0x3, 0x20) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8}) r14 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, &(0x7f0000000740)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xb0, 0x14, 0x3}}], 0x30}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x8000000000000001}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r16 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0xffffffff, 0x100080000, 0x5, 0x0, 0x8]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x44}], 0x1) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000200)=@riscv64_core={0x803000000020000d, &(0x7f00000001c0)=0x2}) ioctl$KVM_RUN(r16, 0xae80, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000040), 0x4304c0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x2) syz_kvm_vgic_v3_setup(r18, 0x1, 0x40) 51m15.145837506s ago: executing program 3 (id=626): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x40000008, 0x0, 0x80}}], 0x50}, 0x0, 0xffffffffffffff14) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 51m12.22163736s ago: executing program 2 (id=627): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r9, 0x1, 0x12, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r12 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r14, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) 51m2.133747961s ago: executing program 3 (id=628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000036000/0x2000)=nil, r3, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, 0x0, 0x22200, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r4, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2a00, 0x0) ioctl$KVM_CREATE_VM(r6, 0x5452, 0x2000fdfd) r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2000000002, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r10 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000400)=[@smc={0x1e, 0x40, {0x3f000000, [0x4, 0x7, 0x4, 0x9, 0x7fffffff]}}, @irq_setup={0x46, 0x18, {0x2, 0x48}}, @svc={0x122, 0x40, {0x80003fff, [0x3, 0x3, 0x8000000000000001, 0x2, 0x7ff]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0xe}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x80, 0x2, 0xe, 0x3, 0x13d, 0x2}}, @mrs={0xbe, 0x18, {0x3d2d}}, @uexit={0x0, 0x18, 0x2}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x0, 0x3, 0x6, 0x3, 0x3}}, @irq_setup={0x46, 0x18, {0x2, 0x1eb}}, @msr={0x14, 0x20, {0x603000000013e532, 0x7}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x3, 0x2, 0x8, 0x81, 0x3}}, @memwrite={0x6e, 0x30, @generic={0x70000, 0x856, 0xe, 0x1}}, @code={0xa, 0x6c, {"0000401f000008d5c0be81d20020b8f2a10180d2820180d2430180d2240080d2020000d4007008d5008008d500579ad20000b8f2410080d2c20180d2c30080d2640180d2020000d40000005a000028d50000251e00f4202e"}}, @eret={0xe6, 0x18, 0xe}, @msr={0x14, 0x20, {0x603000000013c289, 0x1}}, @code={0xa, 0xcc, {"00b8202e007008d500e8a05e00979bd200e0b0f2210080d2420080d2830080d2240180d2020000d40048215e20649cd200c0b0f2410180d2420180d2830080d2a40080d2020000d4c0278fd20080b8f2e10180d2820180d2a30180d2040180d2020000d4c01e99d20000b8f2810180d2420080d2830180d2440080d2020000d4401797d200e0b0f2e10180d2420080d2e30080d2040180d2020000d4001a84d200e0b8f2410180d2a20080d2630080d2240180d2020000d4"}}, @smc={0x1e, 0x40, {0x31000000, [0x7fffffffffffffff, 0xd8, 0xa, 0x1, 0x96]}}, @svc={0x122, 0x40, {0xc400000e, [0x6, 0x3, 0xffffffffffffff49, 0x6, 0xb]}}, @irq_setup={0x46, 0x18, {0x0, 0x800}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0xf, 0x4, 0x7a1}}, @mrs={0xbe, 0x18, {0x603000000013c016}}, @mrs={0xbe, 0x18, {0x603000000013e102}}, @mrs={0xbe, 0x18, {0x603000000013c2aa}}], 0x448}, &(0x7f0000000040)=[@featur1={0x1, 0x6a}], 0x1) mmap$KVM_VCPU(&(0x7f0000ef6000/0x4000)=nil, r9, 0x2000000, 0x810, r10, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 50m50.698698443s ago: executing program 2 (id=629): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc245d53cb01000000000000d60000000700000000000000002000", 0x0, 0x48) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r6, &(0x7f00000001c0)=0xffffff7f, 0xff25) (async) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000080)={0x33, 0xffffffff, 0x8}) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x43fd0b7927145ae5, [0x401, 0x5, 0x2c4, 0x9, 0x5]}}, @msr={0x14, 0x20, {0x603000000013dce8, 0xa415}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x80}, &(0x7f0000000300)=[@featur2={0x1, 0x30}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xeceb) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 50m37.421219836s ago: executing program 3 (id=630): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x2}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x3c0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0xc, &(0x7f00000001c0)=0x4}) 50m36.19260115s ago: executing program 2 (id=631): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x80087601, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_USER_IRQ(r2, 0x4068aea3, &(0x7f00000001c0)) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000f95000/0x1000)=nil}) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x6, 0xfff8}}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000100)=0x5}) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0) (async) r10 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010002e, &(0x7f0000000000)=0xec1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000600)={0x0, &(0x7f0000000280)=[@smc={0x1e, 0x40, {0x8, [0x1, 0x0, 0x6, 0x2, 0x4]}}, @irq_setup={0x46, 0x18, {0x0, 0x164}}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x156}}, @irq_setup={0x46, 0x18, {0x1, 0x12d}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x1c5}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x7}}, @code={0xa, 0xb4, {"000028d5a0049dd200c0b0f2210080d2820180d2c30180d2440080d2020000d40020c00de06999d20000b8f2010080d2c20180d2630180d2a40180d2020000d40024007fa0cd80d20000b0f2010080d2220180d2a30180d2240180d2020000d4c04493d20040b8f2210180d2020180d2230180d2440180d2020000d4006982d20040b8f2610180d2420080d2230180d2e40180d2020000d40000001c007008d5"}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x4, 0x7, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x233}}, @svc={0x122, 0x40, {0x3000000, [0x0, 0x200, 0x3, 0x6c7, 0x1]}}, @msr={0x14, 0x20, {0x603000000013def9, 0x10}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x1, 0x4, 0x4, 0x8, 0x101, 0x2}}, @msr={0x14, 0x20, {0x603000000013c527, 0x8}}, @mrs={0xbe, 0x18, {0x603000000013df7c}}, @code={0xa, 0x9c, {"00a4000fc08f91d200e0b0f2010180d2020180d2830180d2c40180d2020000d40000402d60ac83d20060b0f2410180d2620080d2630080d2a40180d2020000d4007008d5008008d500004069403580d200e0b8f2810080d2020080d2830180d2640180d2020000d4007008d560409fd200a0b8f2610180d2a20180d2430080d2e40080d2020000d4"}}, @uexit={0x0, 0x18, 0x6}], 0x378}, &(0x7f0000000640)=[@featur2={0x1, 0x2}], 0x1) 50m25.950773122s ago: executing program 3 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0x69}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xf, 0x5, 0x10001, 0x3}}, @svc={0x122, 0x40, {0x3000000, [0x5, 0x2a, 0x4, 0xec6c00000, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x7, 0xc}}, @eret={0xe6, 0x18, 0xb}, @uexit={0x0, 0x18, 0x4}, @eret={0xe6, 0x18, 0x7f}, @mrs={0xbe, 0x18, {0x3844}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x1ffe8, 0x2, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0xc3}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x1, 0x9, 0x8, 0x2, 0x3}}], 0x1a8}, &(0x7f0000000100)=[@featur1={0x1, 0x90}], 0x1) mmap$KVM_VCPU(&(0x7f0000db4000/0x4000)=nil, r4, 0x3000007, 0x20010, r5, 0x0) 50m23.160335609s ago: executing program 2 (id=633): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x7ffffffe}) r3 = eventfd2(0xfffffffa, 0x80001) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x19a}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x10000, 0x0, 0xfd, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$eventfd(r3, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfff}, @svc={0x122, 0x40, {0xc4000004, [0x9, 0xffffffffffffff4b, 0xb2e1, 0x89e3, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c005}}, @eret={0xe6, 0x18, 0xfffffffffffffff8}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x66, 0x1}}, @uexit={0x0, 0x18}, @hvc={0x32, 0x40, {0xc4000005, [0x91, 0xde7, 0x4, 0x9, 0x6]}}, @hvc={0x32, 0x40, {0xc4000001, [0xcf, 0xfffffffffffffffc, 0x2, 0x3ff, 0x7]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x6f}}, @uexit={0x0, 0x18, 0xfb}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x100, 0x4, 0xe}}, @irq_setup={0x46, 0x18, {0x1, 0x3c3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0x2, 0xc7, 0x7f, 0x1}}, @svc={0x122, 0x40, {0x84000012, [0x8, 0x3, 0x8, 0xfffffffffffff69b, 0x400]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x9, 0x3, 0x97, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0xf, 0xddfd, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x3, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0xfffffffffffffffb, 0x5}}, @msr={0x14, 0x20, {0x0, 0x2}}, @svc={0x122, 0x40, {0x0, [0x6, 0x100000001, 0x6, 0x7, 0x7fff]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0xf0}}, @memwrite={0x6e, 0x30, @generic={0x100000, 0x7f, 0x1bc, 0xa}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x0, 0x7, 0xd, 0x3}}, @uexit={0x0, 0x18, 0xffff}, @msr={0x14, 0x20, {0x603000000013c009, 0xfffffffffffffdf7}}, @code={0xa, 0x9c, {"00d0204e00b591d20060b8f2810080d2020180d2c30180d2840180d2020000d4806e87d20000b8f2210080d2a20180d2230080d2840180d2020000d4e0b398d20040b8f2810080d2220180d2230080d2e40080d2020000d4007008d5000008d500000090008008d5a09a88d20000b8f2e10180d2820180d2e30080d2640180d2020000d4007008d5"}}, @eret={0xe6, 0x18, 0xc}, @eret={0xe6, 0x18, 0x80000001}, @code={0xa, 0x9c, {"008008d5609780d20000b0f2c10080d2e20180d2630080d2e40180d2020000d440088ed20000b8f2c10180d2820180d2430080d2440080d2020000d4007008d5009c200ee08090d20080b8f2210180d2420180d2a30180d2240080d2020000d4000485d200e0b0f2e10180d2e20080d2e30180d2440080d2020000d4000028d50068a03800a0002f"}}, @uexit={0x0, 0x18, 0x5}, @hvc={0x32, 0x40, {0x84000005, [0x0, 0x0, 0x8000000000000000, 0x4, 0xc]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x0, 0x4}}], 0x5f0}, &(0x7f0000000240)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r11, 0xae80, 0x0) 49m38.680408194s ago: executing program 34 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r5 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0x69}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xf, 0x5, 0x10001, 0x3}}, @svc={0x122, 0x40, {0x3000000, [0x5, 0x2a, 0x4, 0xec6c00000, 0x3]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x100, 0x7, 0xc}}, @eret={0xe6, 0x18, 0xb}, @uexit={0x0, 0x18, 0x4}, @eret={0xe6, 0x18, 0x7f}, @mrs={0xbe, 0x18, {0x3844}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x1ffe8, 0x2, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0xc3}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x1, 0x9, 0x8, 0x2, 0x3}}], 0x1a8}, &(0x7f0000000100)=[@featur1={0x1, 0x90}], 0x1) mmap$KVM_VCPU(&(0x7f0000db4000/0x4000)=nil, r4, 0x3000007, 0x20010, r5, 0x0) 49m31.939304199s ago: executing program 35 (id=633): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x7ffffffe}) r3 = eventfd2(0xfffffffa, 0x80001) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x4, 0x19a}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x10000, 0x0, 0xfd, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$eventfd(r3, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0xfff}, @svc={0x122, 0x40, {0xc4000004, [0x9, 0xffffffffffffff4b, 0xb2e1, 0x89e3, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c005}}, @eret={0xe6, 0x18, 0xfffffffffffffff8}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x66, 0x1}}, @uexit={0x0, 0x18}, @hvc={0x32, 0x40, {0xc4000005, [0x91, 0xde7, 0x4, 0x9, 0x6]}}, @hvc={0x32, 0x40, {0xc4000001, [0xcf, 0xfffffffffffffffc, 0x2, 0x3ff, 0x7]}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x6f}}, @uexit={0x0, 0x18, 0xfb}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x100, 0x4, 0xe}}, @irq_setup={0x46, 0x18, {0x1, 0x3c3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0x2, 0xc7, 0x7f, 0x1}}, @svc={0x122, 0x40, {0x84000012, [0x8, 0x3, 0x8, 0xfffffffffffff69b, 0x400]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x9, 0x3, 0x97, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0xf, 0xddfd, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x3, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0xfffffffffffffffb, 0x5}}, @msr={0x14, 0x20, {0x0, 0x2}}, @svc={0x122, 0x40, {0x0, [0x6, 0x100000001, 0x6, 0x7, 0x7fff]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0xf0}}, @memwrite={0x6e, 0x30, @generic={0x100000, 0x7f, 0x1bc, 0xa}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0x0, 0x7, 0xd, 0x3}}, @uexit={0x0, 0x18, 0xffff}, @msr={0x14, 0x20, {0x603000000013c009, 0xfffffffffffffdf7}}, @code={0xa, 0x9c, {"00d0204e00b591d20060b8f2810080d2020180d2c30180d2840180d2020000d4806e87d20000b8f2210080d2a20180d2230080d2840180d2020000d4e0b398d20040b8f2810080d2220180d2230080d2e40080d2020000d4007008d5000008d500000090008008d5a09a88d20000b8f2e10180d2820180d2e30080d2640180d2020000d4007008d5"}}, @eret={0xe6, 0x18, 0xc}, @eret={0xe6, 0x18, 0x80000001}, @code={0xa, 0x9c, {"008008d5609780d20000b0f2c10080d2e20180d2630080d2e40180d2020000d440088ed20000b8f2c10180d2820180d2430080d2440080d2020000d4007008d5009c200ee08090d20080b8f2210180d2420180d2a30180d2240080d2020000d4000485d200e0b0f2e10180d2e20080d2e30180d2440080d2020000d4000028d50068a03800a0002f"}}, @uexit={0x0, 0x18, 0x5}, @hvc={0x32, 0x40, {0x84000005, [0x0, 0x0, 0x8000000000000000, 0x4, 0xc]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffe8, 0x0, 0x4}}], 0x5f0}, &(0x7f0000000240)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r11, 0xae80, 0x0) 28m0.059551709s ago: executing program 5 (id=729): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r8, 0x3, 0x40b2811, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x0, 0xb, 0xf, 0x2}}, @svc={0x122, 0x40, {0xc4000005, [0x7, 0x8, 0x5, 0x1000, 0x9]}}, @code={0xa, 0x54, {"000000a80038201e000820f80000005300a4200ee0548ed20000b0f2e10080d2820080d2830080d2e40180d2020000d4008008d500a0006f000040f8000028d5"}}, @msr={0x14, 0x20, {0x603000000013b80e, 0x75f}}, @eret={0xe6, 0x18, 0x7ff}, @its_send_cmd={0xaa, 0x28, {0x7, 0x0, 0x3, 0x7, 0x6f97, 0x1, 0x1}}, @msr={0x14, 0x20, {0x603000000013e065, 0x9}}, @uexit={0x0, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x8001, 0x1}}, @hvc={0x32, 0x40, {0x84000005, [0x81, 0x9, 0x640db61b, 0x2, 0x4]}}, @irq_setup={0x46, 0x18, {0x1, 0x14}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x380, 0x5, 0x1}}, @memwrite={0x6e, 0x30, @generic={0x41000, 0x268, 0xbc, 0x11}}, @smc={0x1e, 0x40, {0xc4000003, [0x9, 0xe1, 0xd09, 0x6, 0x4]}}, @smc={0x1e, 0x40, {0x400, [0x7f, 0x44, 0x10000, 0x8, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e537, 0x2}}, @svc={0x122, 0x40, {0xb4000010, [0x6, 0x7fffffff, 0x8, 0x6, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x3, 0x7, 0x4, 0x2, 0x4}}, @irq_setup={0x46, 0x18, {0x2, 0x31f}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0xdd}}, @msr={0x14, 0x20, {0x603000000013c012, 0x5}}, @irq_setup={0x46, 0x18, {0x4, 0x152}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xe00, 0x6, 0x2}}, @memwrite={0x6e, 0x30, @generic={0x80a0000, 0x1f5, 0xff, 0xc}}, @hvc={0x32, 0x40, {0xc4000012, [0x1, 0x9, 0x1000, 0x5, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x4, 0xa, 0x0, 0x5, 0x4}}, @svc={0x122, 0x40, {0x84000006, [0x80000000, 0x4, 0x0, 0x9, 0xf]}}, @svc={0x122, 0x40, {0x800, [0x0, 0x401, 0x5, 0x1, 0x2]}}], 0x504}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r11, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r11, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x100, 0x0}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 27m47.421055914s ago: executing program 4 (id=731): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x4000}) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x14000}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r3, 0x8, 0x80010, r4, 0x0) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@smc={0x1e, 0x40, {0x10, [0x8, 0x101, 0x100000000, 0x1, 0x3]}}, @svc={0x122, 0x40, {0xc4000091, [0x2, 0x8, 0x100000000, 0xe7ab, 0xffffffff]}}, @mrs={0xbe, 0x18, {0x603000000013e18e}}, @uexit={0x0, 0x18, 0xa71f}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x1c2}}, @hvc={0x32, 0x40, {0x4000000, [0x2, 0x718b, 0x4, 0x3, 0x6]}}], 0x118}, &(0x7f0000000280)=[@featur2={0x1, 0xa1}], 0x1) ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f00000002c0)=0x2) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000680)={0x0, &(0x7f0000000300)=[@hvc={0x32, 0x40, {0xc400000e, [0x8, 0x6, 0x8, 0x2, 0x8cfb]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x2, 0xf, 0x10001, 0x4}}, @code={0xa, 0xcc, {"805c8cd200c0b0f2c10080d2020180d2a30180d2c40080d2020000d4000008d520f49cd200c0b8f2210080d2620080d2030180d2440080d2020000d40058602e008080c8806288d200a0b0f2410080d2c20080d2230080d2840180d2020000d4c0008dd200c0b8f2010180d2620080d2c30180d2640180d2020000d4a0649bd20000b8f2a10180d2a20180d2630080d2e40080d2020000d4007008d5401b9ad200e0b8f2010180d2820080d2230180d2440180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x2}}, @msr={0x14, 0x20, {0x603000000013d8ca, 0x100000001}}, @uexit={0x0, 0x18, 0x8}, @mrs={0xbe, 0x18, {0x603000000013defd}}, @memwrite={0x6e, 0x30, @generic={0xdddd1000, 0xb85, 0x1, 0x8}}, @irq_setup={0x46, 0x18, {0x2, 0x32e}}, @svc={0x122, 0x40, {0x84000009, [0x2390, 0xffff, 0x80000001, 0x100000000, 0x9]}}, @mrs={0xbe, 0x18, {0x603000000013def2}}, @eret={0xe6, 0x18, 0xfffffffffffffffe}, @svc={0x122, 0x40, {0x5000000, [0x710000000000, 0x5, 0xf6be, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0xb, 0x4, 0x8, 0x4}}, @eret={0xe6, 0x18, 0xb9}, @hvc={0x32, 0x40, {0xc4000005, [0x9, 0x6, 0x1, 0x6, 0xe6]}}, @eret={0xe6, 0x18, 0x80}], 0x344}, &(0x7f00000006c0)=[@featur2={0x1, 0x80}], 0x1) r7 = eventfd2(0x3, 0x100001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000700)={r7, 0x3, 0x6, r1}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000780)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000740)=0x17}) r8 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) eventfd2(0x8, 0x80801) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000007c0)={r1, 0xa0000, 0x2, r7}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3b) ioctl$KVM_ARM_VCPU_INIT(r8, 0x4020aeae, &(0x7f0000000800)={0x4, 0x48}) r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000bc0)={0x0, &(0x7f0000000840)=[@msr={0x14, 0x20, {0x603000000013df76, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x7}}, @msr={0x14, 0x20, {0x6030000000138080, 0x17}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x70, 0x1, 0xc}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x2, 0x4, 0xffff, 0x2, 0x3}}, @uexit={0x0, 0x18, 0xff}, @hvc={0x32, 0x40, {0x8200000c, [0x5, 0x0, 0x80000000, 0x1, 0x88]}}, @irq_setup={0x46, 0x18, {0x2, 0x31e}}, @eret={0xe6, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013df4c}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x381}}, @mrs={0xbe, 0x18, {0x603000000013e6cb}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x5, 0x4}}, @eret={0xe6, 0x18, 0xc}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x71}}, @smc={0x1e, 0x40, {0x84000005, [0x1, 0xfb, 0x5, 0x8000, 0x1]}}, @svc={0x122, 0x40, {0x100, [0x200, 0xb, 0xd9, 0x97, 0xfff]}}, @hvc={0x32, 0x40, {0x84000003, [0x76, 0x8, 0x0, 0x5]}}, @hvc={0x32, 0x40, {0x2, [0x5, 0x7f, 0x0, 0x1, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0x1, 0x80000000, 0x6}}, @msr={0x14, 0x20, {0x603000000013e66d, 0x73d}}], 0x348}, &(0x7f0000000c00)=[@featur1={0x1, 0x2}], 0x1) r10 = ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000c80)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000c40)}) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000cc0)) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000e40)=@riscv64_smstateen_csr={0x8030000003020000, &(0x7f0000000e00)=0x1ff}) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001100)=[{0x0, &(0x7f0000000e80)=[@mrs={0xbe, 0x18, {0x603000000013df52}}, @hvc={0x32, 0x40, {0x1000000, [0x8, 0xffff, 0x100000000, 0x3ff, 0x3]}}, @msr={0x14, 0x20, {0x603000000013df6f, 0x1ff}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0xa, 0x8, 0x5, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c64b}}, @svc={0x122, 0x40, {0x84000013, [0x100000001, 0x80000000, 0xffffffffffffffe0, 0xfffffffffffff381, 0x6]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x9, 0x8}}, @hvc={0x32, 0x40, {0x32000000, [0x3, 0x1, 0x68000000000000, 0x1, 0x40]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x4, 0xa, 0xfffffff7, 0x9, 0x4}}, @svc={0x122, 0x40, {0x100, [0xf62e, 0x1, 0x3, 0x1000000, 0x2790]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0xc, 0xffffffff, 0x2, 0x1}}, @irq_setup={0x46, 0x18, {0x2, 0xce}}, @uexit={0x0, 0x18, 0x7000000000000000}, @svc={0x122, 0x40, {0x20, [0x2, 0x9, 0xa, 0xfffffffffffff6a3, 0x6]}}], 0x268}], 0x1, 0x0, &(0x7f0000001140)=[@featur2={0x1, 0x34}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001180)=@arm64={0x1, 0x10, 0xfe, '\x00', 0x7fff}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 27m38.941666027s ago: executing program 5 (id=732): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x0, 0x1003, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x10001, 0x0, &(0x7f0000e13000/0x4000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x6, 0x10000, 0x1000, &(0x7f0000eb9000/0x1000)=nil}) 27m35.659464555s ago: executing program 4 (id=733): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100030, &(0x7f0000000000)=0x3ff}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x84000050, [0x9, 0xb4, 0x100, 0x6, 0x88]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000a5a000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x84000012, [0xffffffff, 0x100080001, 0x5, 0x101, 0x13]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x6030000000138002}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 27m12.338796033s ago: executing program 5 (id=734): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x40, 0x14000, 0x0, 0xffffffffffffffff, 0x9}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0xe, 0x3, &(0x7f0000000000)=0x3}) 27m7.787809547s ago: executing program 4 (id=735): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000b80)={0x0, &(0x7f0000000640)=[@smc={0x1e, 0x40, {0xc4000012, [0x80, 0x4, 0x0, 0x4, 0x8001]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@msr={0x14, 0x20, {0x603000000013df46, 0x4}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x1b5}}, @hvc={0x32, 0x40, {0xc5000021, [0x400, 0x40, 0x4, 0xc6c, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e092, 0x6}}, @hvc={0x32, 0x40, {0xc4000005, [0x5, 0xa53, 0x9, 0xf4, 0x5]}}, @code={0xa, 0xb4, {"202e8dd20080b8f2810180d2620080d2830080d2240080d2020000d420d490d20040b8f2610180d2e20080d2230080d2640180d2020000d4000008d5008008d5c0729cd20020b0f2410180d2420080d2430080d2040180d2020000d4801994d200e0b0f2610180d2820180d2a30180d2640080d2020000d40084ff0d008008d5007008d5a05580d20060b0f2e10180d2e20180d2e30080d2240180d2020000d4"}}, @eret={0xe6, 0x18, 0x8001}, @msr={0x14, 0x20, {0x603000000013e100, 0x4}}, @eret={0xe6, 0x18, 0x1000}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x270}}, @eret={0xe6, 0x18, 0x6}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0xd, 0x7, 0x4, 0x3}}, @eret={0xe6, 0x18, 0x950d}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xffe8, 0xc74d, 0xe}}, @irq_setup={0x46, 0x18, {0x1, 0x225}}, @svc={0x122, 0x40, {0x800, [0x2, 0xfffffffffffffff7, 0x4, 0xfffffffffffffffb, 0xf2e9]}}, @smc={0x1e, 0x40, {0x84000010, [0x4, 0x4800000, 0x8, 0x5, 0xffffffff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x4, 0x5, 0x2}}, @svc={0x122, 0x40, {0x6000000, [0x48000000, 0x805, 0x3ff, 0xf66, 0x400]}}], 0x3d4}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, 0x0, 0x40000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x2, 0x80a0000, 0x0, r8, 0x4fd0f096b459bd7b}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x4, 0x0}) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r12, 0x4004ae86, &(0x7f0000000180)=0x6) 26m57.284313209s ago: executing program 5 (id=736): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x20) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x12) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) close(r6) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000000)=@arm64_fp={0x60400000001000ac, 0x0}) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000180)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f00000000c0)=0xffffffffffff5548}) 26m50.547153717s ago: executing program 4 (id=737): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xc000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000040)={0x0, &(0x7f0000000940)=[@uexit={0x0, 0x18, 0x2}, @msr={0x14, 0x20, {0x603000000013c03a, 0x7}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0xa, 0x6, 0x10, 0x1}}, @msr={0x14, 0x20, {0xc06000000027b5f2, 0x5}}, @smc={0x1e, 0x40, {0x84000004, [0x6, 0x6, 0x2, 0x7fffffffffffffff, 0x80000001]}}, @code={0xa, 0x84, {"0004002f0020a00d007008d5007008d5001a90d20000b0f2610180d2a20180d2630180d2040180d2020000d4602485d20080b8f2a10080d2a20180d2630180d2840080d2020000d4007008d5000c207ee02c87d20060b8f2410080d2e20180d2630180d2040080d2020000d41f4000d5"}}, @irq_setup={0x46, 0x18, {0x4, 0x268}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x6190b48, 0x1}}, @uexit={0x0, 0x18, 0x7fff}, @uexit={0x0, 0x18, 0x16}, @its_setup={0x82, 0x28, {0x1, 0x4, 0xe2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xe00, 0x6d35ff1a, 0x1}}, @uexit={0x0, 0x18, 0x4}, @hvc={0x32, 0x40, {0x100, [0x3ff, 0x5dfc, 0x10, 0x5, 0x4]}}, @smc={0x1e, 0x40, {0xc600200a, [0x4, 0x3, 0x2, 0x9, 0x400]}}, @mrs={0xbe, 0x18, {0x603000000013f687}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xc00, 0x10000000000000, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xfad0, 0x6, 0x4}}, @code={0xa, 0x84, {"007008d520458ad200e0b8f2210180d2220180d2c30080d2840180d2020000d40000c03800d497d20060b8f2a10180d2420080d2630180d2c40080d2020000d4008008d5007008d500f8a02e000008d5a01c9ed20020b0f2210180d2c20080d2e30080d2a40080d2020000d4007008d5"}}, @uexit={0x0, 0x18, 0x7}, @its_setup={0x82, 0x28, {0x4, 0x3, 0xd7}}, @uexit={0x0, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x4, 0x31}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0xffffffff, 0xb, 0x8000, 0x81, 0x3}}, @code={0xa, 0x84, {"0058c01a007008d580789dd20000b8f2810080d2420180d2430080d2a40180d2020000d4000820b8000028d5000008d5007008d500a0004f605982d20080b0f2a10080d2420180d2030080d2a40180d2020000d4a08889d20000b0f2010180d2620080d2c30180d2040180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013e6df, 0xe4}}, @mrs={0xbe, 0x18, {0x603000000013800d}}, @smc={0x1e, 0x40, {0x30000000, [0xff, 0x91, 0x5, 0x8, 0x101]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x1, 0x6, 0x1, 0x1}}, @hvc={0x32, 0x40, {0x84000004, [0x101, 0x6, 0x47d, 0xb306, 0x2]}}, @eret={0xe6, 0x18, 0x8}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x232}}], 0x5e4}, &(0x7f0000000080)=[@featur1={0x1, 0x1}], 0x1) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000) 26m28.389277586s ago: executing program 4 (id=738): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x10001, 0x2, 0x10000, 0x1000, &(0x7f0000f85000/0x1000)=nil}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000700)={0x7, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000240)={0x200002f}) (async) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (async, rerun: 64) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE(r11, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) (async, rerun: 32) ioctl$KVM_RUN(r13, 0xae80, 0x0) (rerun: 32) r14 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r14, 0xfffffffffffffffe, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0xfffffffa, 0x7, &(0x7f0000000000)=0x3}) syz_kvm_assert_syzos_uexit$arm64(r14, 0xffffffffffffffff, 0x0) 26m27.489206113s ago: executing program 5 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x30000000, [0x2, 0x4, 0x4, 0x5, 0x7]}}, @mrs={0xbe, 0x18, {0x603000000013c641}}, @mrs={0xbe, 0x18, {0x752}}, @code={0xa, 0xb4, {"00fa99d20040b0f2e10080d2a20180d2830080d2440180d2020000d420b390d20040b0f2610180d2a20180d2630080d2040080d2020000d4208c8ed200e0b0f2a10080d2620080d2e30080d2440080d2020000d480f69cd20000b8f2210080d2020180d2a30180d2440080d2020000d40044002f007008d50040000d0000800c00e48ed20020b8f2210180d2020180d2c30180d2a40080d2020000d4000008d5"}}, @svc={0x122, 0x40, {0x84000012, [0x5, 0x0, 0x8edb, 0x6, 0x7]}}], 0x164}, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000004000/0x4000)=nil, 0x930, 0x1, 0x10, r7, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0x40086602, 0x110c230000) 26m15.720894805s ago: executing program 5 (id=740): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB="575d73d5652285b7e7735b796cb342e1f47a02e6e4ff5687ebd683854a51ae6d74c579a90f5edbf10e9c92b40b0d3c24a07a2f1ef572e60ebe8e6ff519711ab667a5ec68bb8882c1d6ae0c4d03108c4196ad8bdde85ee2d5093de367c54b34a97e7e312b6b514c2e9d70507e59bac9a5ac42f3100a2708e692598088bd9a0abe7165c359d8a7707505d8a7522aca768594e884214acc83df31e12e9b3379154aec25906a0879f3dd5ba19aa904e682b485504fa52cddf69cd736d8", @ANYBLOB="94fe3eb9bc007dfe104ade3a412409747312b4fee5f19887be524462ddde94eebd06b1fc86825f425ff16718325a2b0c39672043e9a53ca63d627930f1d7e3ab8187f557", @ANYBLOB="a95a4f6f9fbe2b0e9e4df0424548400e4de826534974b353cc63788f2f57f6e7d4db886c1da91938de81aa5da3f2e3de1d5470", @ANYRESHEX, @ANYRESOCT=r1], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x120) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x141000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_GUEST_MEMFD(r13, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r14, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f0000000000)={0x7, 0x2}) r15 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) 26m5.071243401s ago: executing program 4 (id=741): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000df6000/0x2000)=nil, 0x930, 0xa, 0x2012, r3, 0x40000) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x1}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x40090000, 0x0, 0x101, 0x2}}], 0x40}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x9, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0xb, 0x7, 0x0}) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r14, 0xae80, 0x0) 25m28.500144117s ago: executing program 36 (id=740): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB="575d73d5652285b7e7735b796cb342e1f47a02e6e4ff5687ebd683854a51ae6d74c579a90f5edbf10e9c92b40b0d3c24a07a2f1ef572e60ebe8e6ff519711ab667a5ec68bb8882c1d6ae0c4d03108c4196ad8bdde85ee2d5093de367c54b34a97e7e312b6b514c2e9d70507e59bac9a5ac42f3100a2708e692598088bd9a0abe7165c359d8a7707505d8a7522aca768594e884214acc83df31e12e9b3379154aec25906a0879f3dd5ba19aa904e682b485504fa52cddf69cd736d8", @ANYBLOB="94fe3eb9bc007dfe104ade3a412409747312b4fee5f19887be524462ddde94eebd06b1fc86825f425ff16718325a2b0c39672043e9a53ca63d627930f1d7e3ab8187f557", @ANYBLOB="a95a4f6f9fbe2b0e9e4df0424548400e4de826534974b353cc63788f2f57f6e7d4db886c1da91938de81aa5da3f2e3de1d5470", @ANYRESHEX, @ANYRESOCT=r1], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x120) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r6 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x141000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_GUEST_MEMFD(r13, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r14, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f0000000000)={0x7, 0x2}) r15 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) 25m16.201252564s ago: executing program 37 (id=741): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000df6000/0x2000)=nil, 0x930, 0xa, 0x2012, r3, 0x40000) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x1}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x40090000, 0x0, 0x101, 0x2}}], 0x40}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x9, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0xb, 0x7, 0x0}) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r12, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r14, 0xae80, 0x0) 2m58.511649607s ago: executing program 6 (id=814): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x22840, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df11, &(0x7f0000000280)=0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x6, 0x2000, 0x2000, &(0x7f0000ec1000/0x2000)=nil}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000100)=0x8010000000000001}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0x7}, @eret={0xe6, 0x18, 0x1}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r14, 0x4004ae99, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400a00, 0x0) 2m55.807112127s ago: executing program 7 (id=815): mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b2, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00001fb000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000540)=@attr_other={0x0, 0x8, 0x80, &(0x7f0000000500)=0x5}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4000ae84, &(0x7f0000000000)={{0x0, 0x2000, 0x10, 0x5, 0x5, 0x9d, 0x9, 0xff, 0x5, 0xfb, 0x1, 0x7}, {0xfec09000, 0xeeee0000, 0x8, 0x4, 0x1, 0x0, 0x7, 0xc, 0xff, 0x8, 0x0, 0x8}, {0x10000, 0xeeec7000, 0x4, 0x7, 0x3, 0x9, 0x40, 0x6, 0x4, 0x2a, 0xa, 0x5}, {0x405a000, 0x41000, 0xf, 0x6, 0xc, 0xff, 0x4, 0x1, 0x1f, 0x72, 0x9, 0x5}, {0x156000, 0x8000000, 0xf, 0xd, 0xe, 0x0, 0x4, 0x4, 0x6, 0x8, 0xd8, 0xd9}, {0x26000, 0x54000, 0xa, 0xfa, 0xfe, 0xf8, 0xdf, 0x3, 0x4, 0x5, 0x2, 0x40}, {0x41000, 0xeeeee000, 0xe, 0x4, 0x0, 0x9, 0x80, 0xec, 0x8, 0x3, 0x49, 0x8c}, {0x80f8000, 0x4, 0xe, 0x3, 0x5, 0x3, 0xa4, 0x5, 0x2e, 0xe, 0x5, 0x3}, {0xffffffff, 0xfff9}, {0xd000, 0x59e}, 0x10000, 0x0, 0x60000, 0x20161, 0xf, 0x0, 0x80ad000, [0xffffffff, 0x6, 0x8, 0x8]}) 2m30.033154076s ago: executing program 7 (id=816): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 2m26.420579351s ago: executing program 6 (id=817): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000480)=@arm64_fw={0x6030000000140000, &(0x7f0000000440)=0xdd}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100030, &(0x7f0000000000)=0x3ff}) r10 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x7, &(0x7f0000000200)=0x807fffd}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r14, &(0x7f00000001c0)=0x1, 0x11) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) write$eventfd(r17, &(0x7f00000001c0)=0x9, 0x1d) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2m12.442962526s ago: executing program 7 (id=818): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x40) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x651, 0x400, &(0x7f00000000c0)=0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x753481, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x800000000206, &(0x7f0000000000)=0x200}) r8 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000040)={0x3, 0x78}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x21) close(0xffffffffffffffff) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r13, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) 1m59.808886975s ago: executing program 6 (id=819): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) close(0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000ee2000/0x1000)=nil, 0x930, 0x100000c, 0x11, r7, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x4c4882, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000040)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000200)=0x5}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x2000006, 0x810, r4, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_SET_DEVICE_ATTR_vm(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x56f, 0x7}}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0xae03, 0xaa) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000100)=@x86={0x2, 0x37, 0x81, 0x0, 0xfffffff9, 0x7, 0x3, 0x7, 0x3, 0xab, 0x74, 0x6, 0x0, 0xecf, 0x9, 0xc, 0x9, 0x6, 0x7, '\x00', 0x9, 0x2496}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r15, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r16, 0x3}) eventfd2(0x8, 0x80800) 1m48.352900157s ago: executing program 7 (id=820): r0 = mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0x801c581f, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc2000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) 1m32.810656239s ago: executing program 6 (id=821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f00002e6000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000380)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp={0x6040000004100099, &(0x7f0000000240)=0x5}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000000)=0x13}) r7 = eventfd2(0x80000001, 0x800) write$eventfd(r7, &(0x7f00000000c0)=0x9, 0x8) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000000000/0x400000)=nil) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) close(r9) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_PTP_KVM(r12, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, 0x0) 1m26.16967728s ago: executing program 7 (id=822): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) r2 = eventfd2(0x10000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x3}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xb168, 0x0, r2}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x4) (async) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0x6, 0x2, 0x1, 0x0, @sint={0x5, 0x3}}, {0x6, 0x2, 0x0, 0x0, @msi={0x100, 0x8000, 0x5a}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1c) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0xb, 0xffffffffffffffff, 0x1}) close(r7) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x41, &(0x7f0000000000)=0x781}) r8 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x7ffff, 0x1000, 0x40000000, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x13) 1m8.357108217s ago: executing program 7 (id=823): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x302, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df19, 0x9}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x0, 0x46}) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) eventfd2(0x8801, 0x800) r13 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_vgic_v3_setup(r14, 0x3, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x7, &(0x7f0000000080)=0xf4}) ioctl$KVM_CREATE_VM(r13, 0xae01, 0xc) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m4.85131051s ago: executing program 6 (id=824): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, r1, 0x5, 0x1032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r3, 0x3, 0xa0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000000)=0x4}) munmap(&(0x7f0000d8c000/0x2000)=nil, 0x2000) r6 = openat$kvm(0x0, &(0x7f0000000200), 0xa881, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000340)=0xfffffffffffffffc}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000000)={0x7000, 0x1, 0xed18, 0x0, 0x5}) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x40}, &(0x7f0000000300)=[@featur2={0x1, 0xd1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 47.601877504s ago: executing program 6 (id=825): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r4, 0x8, 0x30, r3, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) close(r9) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) close(0x4) close(r6) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x6, 0xfff8}}) r14 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r15 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000000)=0x80000000}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r4, 0x1000001, 0x12, r3, 0x0) 20.41858506s ago: executing program 38 (id=823): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x302, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013df19, 0x9}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000200)={0x0, 0x46}) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) eventfd2(0x8801, 0x800) r13 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_vgic_v3_setup(r14, 0x3, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x7, &(0x7f0000000080)=0xf4}) ioctl$KVM_CREATE_VM(r13, 0xae01, 0xc) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 39 (id=825): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r4, 0x8, 0x30, r3, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) close(r9) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) close(0x4) close(r6) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r13, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x6, 0xfff8}}) r14 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r15 = syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x5, 0x1, &(0x7f0000000000)=0x80000000}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8}) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r4, 0x1000001, 0x12, r3, 0x0) kernel console output (not intermixed with test programs): [ 460.162871][ T3170] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:18605' (ED25519) to the list of known hosts. [ 639.031187][ T25] audit: type=1400 audit(638.260:61): avc: denied { name_bind } for pid=3332 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 640.905711][ T25] audit: type=1400 audit(640.130:62): avc: denied { execute } for pid=3333 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 640.956225][ T25] audit: type=1400 audit(640.150:63): avc: denied { execute_no_trans } for pid=3333 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 668.089834][ T25] audit: type=1400 audit(667.320:64): avc: denied { mounton } for pid=3333 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 668.147129][ T25] audit: type=1400 audit(667.370:65): avc: denied { mount } for pid=3333 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 668.233078][ T3333] cgroup: Unknown subsys name 'net' [ 668.313935][ T25] audit: type=1400 audit(667.540:66): avc: denied { unmount } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 668.805246][ T3333] cgroup: Unknown subsys name 'cpuset' [ 668.957182][ T3333] cgroup: Unknown subsys name 'rlimit' [ 669.920564][ T25] audit: type=1400 audit(669.150:67): avc: denied { setattr } for pid=3333 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 669.940556][ T25] audit: type=1400 audit(669.170:68): avc: denied { mounton } for pid=3333 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 669.972386][ T25] audit: type=1400 audit(669.200:69): avc: denied { mount } for pid=3333 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 671.048001][ T3337] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 671.070297][ T25] audit: type=1400 audit(670.290:70): avc: denied { relabelto } for pid=3337 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 671.090633][ T25] audit: type=1400 audit(670.320:71): avc: denied { write } for pid=3337 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 671.280362][ T25] audit: type=1400 audit(670.510:72): avc: denied { read } for pid=3333 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 671.306817][ T25] audit: type=1400 audit(670.520:73): avc: denied { open } for pid=3333 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 671.349795][ T3333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 728.638924][ T25] audit: type=1400 audit(727.870:74): avc: denied { execmem } for pid=3338 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 732.441662][ T25] audit: type=1400 audit(731.670:76): avc: denied { open } for pid=3341 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.462563][ T25] audit: type=1400 audit(731.650:75): avc: denied { read } for pid=3340 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.538426][ T25] audit: type=1400 audit(731.750:77): avc: denied { mounton } for pid=3341 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 732.767937][ T25] audit: type=1400 audit(732.000:78): avc: denied { module_request } for pid=3340 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 732.788264][ T25] audit: type=1400 audit(732.010:79): avc: denied { module_request } for pid=3341 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 733.847084][ T25] audit: type=1400 audit(733.060:80): avc: denied { sys_module } for pid=3341 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 757.441122][ T3340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.869623][ T3340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.940222][ T3341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.242256][ T3341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.937885][ T3340] hsr_slave_0: entered promiscuous mode [ 774.990238][ T3340] hsr_slave_1: entered promiscuous mode [ 776.732210][ T3341] hsr_slave_0: entered promiscuous mode [ 776.787966][ T3341] hsr_slave_1: entered promiscuous mode [ 776.817510][ T3341] debugfs: 'hsr0' already exists in 'hsr' [ 776.822376][ T3341] Cannot create hsr debugfs directory [ 782.806475][ T25] audit: type=1400 audit(782.030:81): avc: denied { create } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 782.868568][ T25] audit: type=1400 audit(782.090:82): avc: denied { write } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 782.996344][ T25] audit: type=1400 audit(782.220:83): avc: denied { read } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 783.195381][ T3340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.595847][ T3340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 783.853113][ T3340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 784.113224][ T3340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 785.797005][ T3341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 786.082156][ T3341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 786.352700][ T3341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 786.669071][ T3341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.030688][ T3340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.143969][ T3341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.527942][ T3340] veth0_vlan: entered promiscuous mode [ 858.998852][ T3340] veth1_vlan: entered promiscuous mode [ 860.931490][ T3340] veth0_macvtap: entered promiscuous mode [ 861.300172][ T3340] veth1_macvtap: entered promiscuous mode [ 861.980115][ T3341] veth0_vlan: entered promiscuous mode [ 862.738401][ T3341] veth1_vlan: entered promiscuous mode [ 864.087846][ T3393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.138257][ T3393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.148093][ T3393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.168043][ T3393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.588417][ T3341] veth0_macvtap: entered promiscuous mode [ 866.843603][ T25] audit: type=1400 audit(866.000:84): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 867.156615][ T25] audit: type=1400 audit(866.380:85): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.KSCA96/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 867.377041][ T25] audit: type=1400 audit(866.600:86): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 867.412536][ T3341] veth1_macvtap: entered promiscuous mode [ 867.678171][ T25] audit: type=1400 audit(866.900:87): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.KSCA96/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 867.841571][ T25] audit: type=1400 audit(867.030:88): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.KSCA96/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 868.416899][ T25] audit: type=1400 audit(867.640:89): avc: denied { unmount } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 868.806218][ T25] audit: type=1400 audit(867.970:90): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 868.957924][ T25] audit: type=1400 audit(868.170:91): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="gadgetfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 869.343892][ T25] audit: type=1400 audit(868.570:92): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 869.443177][ T25] audit: type=1400 audit(868.670:93): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 869.698839][ T3395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.720095][ T3395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.770952][ T3395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.788305][ T3395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.340697][ T3340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 872.892673][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 872.919115][ T25] audit: type=1400 audit(872.120:95): avc: denied { read write } for pid=3340 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 872.986548][ T25] audit: type=1400 audit(872.210:96): avc: denied { open } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 873.037497][ T25] audit: type=1400 audit(872.250:97): avc: denied { ioctl } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 882.485921][ T25] audit: type=1400 audit(881.610:98): avc: denied { read append } for pid=3492 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 882.488249][ T25] audit: type=1400 audit(881.670:99): avc: denied { open } for pid=3492 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 883.102702][ T25] audit: type=1400 audit(882.330:100): avc: denied { ioctl } for pid=3492 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 887.547729][ T25] audit: type=1400 audit(886.760:101): avc: denied { setattr } for pid=3492 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 915.368501][ T25] audit: type=1400 audit(914.540:102): avc: denied { execute } for pid=3513 comm="syz.1.6" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 952.971447][ T25] audit: type=1400 audit(952.200:103): avc: denied { write } for pid=3542 comm="syz.1.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 976.696666][ T25] audit: type=1400 audit(975.910:104): avc: denied { create } for pid=3552 comm="syz.0.17" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 978.108048][ T25] audit: type=1400 audit(977.330:105): avc: denied { map } for pid=3552 comm="syz.0.17" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 978.178328][ T25] audit: type=1400 audit(977.410:106): avc: denied { read } for pid=3552 comm="syz.0.17" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=4703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1138.793114][ T25] audit: type=1400 audit(1138.020:107): avc: denied { execute } for pid=3642 comm="syz.1.46" path="/21/T" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1257.478722][ T3713] debugfs: 'vgic-its-state@8080000' already exists in '3713-9' [ 1596.376425][ T3912] kvm [3912]: Failed to find VMA for hva 0x20d8d000 [ 1757.990671][ T25] audit: type=1400 audit(1757.180:108): avc: denied { ioctl } for pid=3994 comm="syz.1.147" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1865.091720][ T4062] kvm [4062]: Failed to find VMA for hva 0x21016000 [ 1939.621282][ T25] audit: type=1400 audit(1938.850:109): avc: denied { map } for pid=4102 comm="syz.0.180" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1939.716680][ T25] audit: type=1400 audit(1938.880:110): avc: denied { execute } for pid=4102 comm="syz.0.180" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2081.870638][ T25] audit: type=1400 audit(2081.070:111): avc: denied { map } for pid=4181 comm="syz.1.206" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2425.162168][ T4371] FAULT_INJECTION: forcing a failure. [ 2425.162168][ T4371] name failslab, interval 1, probability 0, space 0, times 1 [ 2425.213759][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT [ 2425.214451][ T4371] Hardware name: linux,dummy-virt (DT) [ 2425.214914][ T4371] Call trace: [ 2425.215329][ T4371] show_stack+0x2c/0x3c (C) [ 2425.217235][ T4371] __dump_stack+0x30/0x40 [ 2425.217651][ T4371] dump_stack_lvl+0xd8/0x12c [ 2425.217951][ T4371] dump_stack+0x1c/0x28 [ 2425.218253][ T4371] should_fail_ex+0x56c/0x6d8 [ 2425.218476][ T4371] should_failslab+0xb8/0xec [ 2425.218745][ T4371] __kmalloc_noprof+0xe8/0x680 [ 2425.218985][ T4371] tomoyo_realpath_from_path+0xdc/0x628 [ 2425.219290][ T4371] tomoyo_path_number_perm+0x13c/0x33c [ 2425.219545][ T4371] tomoyo_file_ioctl+0x2c/0x3c [ 2425.219817][ T4371] security_file_ioctl+0xe0/0x2cc [ 2425.220101][ T4371] __arm64_sys_ioctl+0xd0/0x244 [ 2425.220412][ T4371] invoke_syscall+0x90/0x230 [ 2425.220691][ T4371] el0_svc_common+0x120/0x2f4 [ 2425.220973][ T4371] do_el0_svc+0x58/0x74 [ 2425.221262][ T4371] el0_svc+0x5c/0x238 [ 2425.221581][ T4371] el0t_64_sync_handler+0x84/0x12c [ 2425.221866][ T4371] el0t_64_sync+0x198/0x19c [ 2425.346237][ T4371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2450.301838][ T4383] kvm [4383]: Failed to find VMA for hva 0x21016000 [ 2450.940767][ T4380] kvm [4380]: Failed to find VMA for hva 0x21016000 [ 2462.267806][ T4388] FAULT_INJECTION: forcing a failure. [ 2462.267806][ T4388] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.316081][ T4388] CPU: 0 UID: 0 PID: 4388 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT [ 2462.316500][ T4388] Hardware name: linux,dummy-virt (DT) [ 2462.316609][ T4388] Call trace: [ 2462.316688][ T4388] show_stack+0x2c/0x3c (C) [ 2462.317032][ T4388] __dump_stack+0x30/0x40 [ 2462.317349][ T4388] dump_stack_lvl+0xd8/0x12c [ 2462.317669][ T4388] dump_stack+0x1c/0x28 [ 2462.317966][ T4388] should_fail_ex+0x56c/0x6d8 [ 2462.318210][ T4388] should_failslab+0xb8/0xec [ 2462.318490][ T4388] __kmalloc_noprof+0xe8/0x680 [ 2462.318727][ T4388] tomoyo_encode+0x274/0x4e4 [ 2462.318994][ T4388] tomoyo_realpath_from_path+0x5bc/0x628 [ 2462.319291][ T4388] tomoyo_path_number_perm+0x13c/0x33c [ 2462.319543][ T4388] tomoyo_file_ioctl+0x2c/0x3c [ 2462.319815][ T4388] security_file_ioctl+0xe0/0x2cc [ 2462.320099][ T4388] __arm64_sys_ioctl+0xd0/0x244 [ 2462.320404][ T4388] invoke_syscall+0x90/0x230 [ 2462.320684][ T4388] el0_svc_common+0x120/0x2f4 [ 2462.320967][ T4388] do_el0_svc+0x58/0x74 [ 2462.321258][ T4388] el0_svc+0x5c/0x238 [ 2462.321580][ T4388] el0t_64_sync_handler+0x84/0x12c [ 2462.321873][ T4388] el0t_64_sync+0x198/0x19c [ 2462.420056][ T4388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2508.979464][ T4411] FAULT_INJECTION: forcing a failure. [ 2508.979464][ T4411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2509.000286][ T4411] CPU: 0 UID: 0 PID: 4411 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT [ 2509.000676][ T4411] Hardware name: linux,dummy-virt (DT) [ 2509.000786][ T4411] Call trace: [ 2509.000880][ T4411] show_stack+0x2c/0x3c (C) [ 2509.001258][ T4411] __dump_stack+0x30/0x40 [ 2509.001595][ T4411] dump_stack_lvl+0xd8/0x12c [ 2509.001885][ T4411] dump_stack+0x1c/0x28 [ 2509.002186][ T4411] should_fail_ex+0x56c/0x6d8 [ 2509.002423][ T4411] should_fail+0x14/0x24 [ 2509.002629][ T4411] should_fail_usercopy+0x20/0x30 [ 2509.002849][ T4411] _inline_copy_from_user+0x44/0x18c [ 2509.003100][ T4411] kvm_device_ioctl+0x2d0/0x418 [ 2509.003375][ T4411] __arm64_sys_ioctl+0x18c/0x244 [ 2509.003668][ T4411] invoke_syscall+0x90/0x230 [ 2509.003945][ T4411] el0_svc_common+0x120/0x2f4 [ 2509.004269][ T4411] do_el0_svc+0x58/0x74 [ 2509.004548][ T4411] el0_svc+0x5c/0x238 [ 2509.004833][ T4411] el0t_64_sync_handler+0x84/0x12c [ 2509.005130][ T4411] el0t_64_sync+0x198/0x19c [ 2533.235646][ T4432] FAULT_INJECTION: forcing a failure. [ 2533.235646][ T4432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.243786][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT [ 2533.244192][ T4432] Hardware name: linux,dummy-virt (DT) [ 2533.244304][ T4432] Call trace: [ 2533.244394][ T4432] show_stack+0x2c/0x3c (C) [ 2533.244739][ T4432] __dump_stack+0x30/0x40 [ 2533.245022][ T4432] dump_stack_lvl+0xd8/0x12c [ 2533.245327][ T4432] dump_stack+0x1c/0x28 [ 2533.245639][ T4432] should_fail_ex+0x56c/0x6d8 [ 2533.245865][ T4432] should_fail+0x14/0x24 [ 2533.246068][ T4432] should_fail_usercopy+0x20/0x30 [ 2533.246299][ T4432] simple_read_from_buffer+0xd0/0x294 [ 2533.246558][ T4432] proc_fail_nth_read+0x184/0x214 [ 2533.246807][ T4432] vfs_read+0x220/0x9d8 [ 2533.247007][ T4432] ksys_read+0x108/0x1fc [ 2533.247220][ T4432] __arm64_sys_read+0x98/0xcc [ 2533.247440][ T4432] invoke_syscall+0x90/0x230 [ 2533.247723][ T4432] el0_svc_common+0x120/0x2f4 [ 2533.247999][ T4432] do_el0_svc+0x58/0x74 [ 2533.248291][ T4432] el0_svc+0x5c/0x238 [ 2533.248594][ T4432] el0t_64_sync_handler+0x84/0x12c [ 2533.248883][ T4432] el0t_64_sync+0x198/0x19c [ 2833.200515][ T4597] kvm [4596]: Unsupported guest access at: eeef0000 [ 2833.200515][ T4597] { Op0( 2), Op1( 0), CRn( 0), CRm( 0), Op2( 2), func_write }, [ 2834.163557][ T4597] kvm [4597]: Failed to find VMA for hva 0x20d8d000 [ 2899.327898][ T4630] kvm [4630]: Failed to find VMA for hva 0x20c01000 [ 3048.578639][ T4697] kvm [4697]: Failed to find VMA for hva 0x20d8d000 [ 3048.908758][ T4697] kvm [4697]: Failed to find VMA for hva 0x20c01000 [ 3354.047977][ T4877] kvm [4877]: Failed to find VMA for hva 0x21016000 [ 3530.088155][ T25] audit: type=1400 audit(3529.290:112): avc: denied { map } for pid=4972 comm="syz.1.446" path="pipe:[2789]" dev="pipefs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3530.121998][ T25] audit: type=1400 audit(3529.350:113): avc: denied { execute } for pid=4972 comm="syz.1.446" path="pipe:[2789]" dev="pipefs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3726.550320][ T5094] kvm [5094]: Failed to find VMA for hva 0x21016000 [ 3726.988245][ T5094] kvm [5094]: Failed to find VMA for hva 0x21016000 [ 3990.920835][ T5232] kvm [5232]: Failed to find VMA for hva 0x21016000 [ 4085.537874][ T5280] FAULT_INJECTION: forcing a failure. [ 4085.537874][ T5280] name failslab, interval 1, probability 0, space 0, times 0 [ 4085.618732][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT [ 4085.619137][ T5280] Hardware name: linux,dummy-virt (DT) [ 4085.619261][ T5280] Call trace: [ 4085.619343][ T5280] show_stack+0x2c/0x3c (C) [ 4085.619691][ T5280] __dump_stack+0x30/0x40 [ 4085.619975][ T5280] dump_stack_lvl+0xd8/0x12c [ 4085.620278][ T5280] dump_stack+0x1c/0x28 [ 4085.620557][ T5280] should_fail_ex+0x56c/0x6d8 [ 4085.620777][ T5280] should_failslab+0xb8/0xec [ 4085.621047][ T5280] kmem_cache_alloc_noprof+0x90/0x5b4 [ 4085.621319][ T5280] security_file_alloc+0x38/0x32c [ 4085.621648][ T5280] init_file+0xb0/0x368 [ 4085.621874][ T5280] alloc_empty_file+0x74/0x17c [ 4085.622092][ T5280] alloc_file_pseudo+0xf0/0x1e8 [ 4085.622350][ T5280] hugetlb_file_setup+0x364/0x544 [ 4085.622659][ T5280] ksys_mmap_pgoff+0x17c/0x448 [ 4085.622955][ T5280] __arm64_sys_mmap+0x13c/0x198 [ 4085.623270][ T5280] invoke_syscall+0x90/0x230 [ 4085.623552][ T5280] el0_svc_common+0x120/0x2f4 [ 4085.623834][ T5280] do_el0_svc+0x58/0x74 [ 4085.624103][ T5280] el0_svc+0x5c/0x238 [ 4085.624409][ T5280] el0t_64_sync_handler+0x84/0x12c [ 4085.624691][ T5280] el0t_64_sync+0x198/0x19c [ 4408.816745][ T5462] kvm [5462]: Failed to find VMA for hva 0x20c01000 [ 4549.103393][ T25] audit: type=1400 audit(4548.330:114): avc: denied { module_request } for pid=5512 comm="syz-executor" kmod="rose3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 4550.502910][ T3453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4552.078196][ T3453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4553.340484][ T3453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4554.930157][ T3453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4570.996999][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4571.399183][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4571.603855][ T3453] bond0 (unregistering): Released all slaves [ 4573.851368][ T3453] hsr_slave_0: left promiscuous mode [ 4573.933666][ T3453] hsr_slave_1: left promiscuous mode [ 4574.809881][ T3453] veth1_macvtap: left promiscuous mode [ 4574.828360][ T3453] veth0_macvtap: left promiscuous mode [ 4574.850006][ T3453] veth1_vlan: left promiscuous mode [ 4574.878769][ T3453] veth0_vlan: left promiscuous mode [ 4592.398152][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4593.033960][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4596.596501][ T3453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4597.901526][ T3453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4599.359418][ T3453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4600.371513][ T3453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4615.617873][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4615.828133][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4616.008002][ T3453] bond0 (unregistering): Released all slaves [ 4617.539709][ T3453] hsr_slave_0: left promiscuous mode [ 4617.626489][ T3453] hsr_slave_1: left promiscuous mode [ 4618.146687][ T3453] veth1_macvtap: left promiscuous mode [ 4618.150191][ T3453] veth0_macvtap: left promiscuous mode [ 4618.177785][ T3453] veth1_vlan: left promiscuous mode [ 4618.181605][ T3453] veth0_vlan: left promiscuous mode [ 4639.646414][ T5502] hsr_slave_0: entered promiscuous mode [ 4639.713746][ T5502] hsr_slave_1: entered promiscuous mode [ 4646.643528][ T5512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4647.356948][ T5512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4653.138614][ T5502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4653.467190][ T5502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4653.740936][ T5502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4654.078520][ T5502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4671.018146][ T5512] hsr_slave_0: entered promiscuous mode [ 4671.081757][ T5512] hsr_slave_1: entered promiscuous mode [ 4671.133666][ T5512] debugfs: 'hsr0' already exists in 'hsr' [ 4671.152384][ T5512] Cannot create hsr debugfs directory [ 4676.678263][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4685.768350][ T5512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 4686.191421][ T5512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 4686.522383][ T5512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 4686.893876][ T5512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 4715.931478][ T5512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4779.598714][ T5502] veth0_vlan: entered promiscuous mode [ 4780.667377][ T5502] veth1_vlan: entered promiscuous mode [ 4783.483130][ T5502] veth0_macvtap: entered promiscuous mode [ 4783.899964][ T5502] veth1_macvtap: entered promiscuous mode [ 4787.085648][ T5642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4787.170390][ T5642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4787.397531][ T5642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4787.399015][ T5642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4820.747070][ T5512] veth0_vlan: entered promiscuous mode [ 4822.157697][ T5512] veth1_vlan: entered promiscuous mode [ 4825.980968][ T5512] veth0_macvtap: entered promiscuous mode [ 4826.968064][ T5512] veth1_macvtap: entered promiscuous mode [ 4831.486207][ T5534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4831.506158][ T5519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4831.507022][ T5519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4831.507741][ T5519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5051.743764][ T5642] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5054.860507][ T5642] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5056.387901][ T5642] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5058.141023][ T5642] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5081.967362][ T5642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5082.246697][ T5642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5082.357692][ T5642] bond0 (unregistering): Released all slaves [ 5085.256071][ T5642] hsr_slave_0: left promiscuous mode [ 5085.363633][ T5642] hsr_slave_1: left promiscuous mode [ 5086.500902][ T5642] veth1_macvtap: left promiscuous mode [ 5086.556673][ T5642] veth0_macvtap: left promiscuous mode [ 5086.571915][ T5642] veth1_vlan: left promiscuous mode [ 5086.598888][ T5642] veth0_vlan: left promiscuous mode [ 5112.327146][ T5642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5114.303006][ T5642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5115.898475][ T5642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5117.547729][ T5642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5136.668611][ T5642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5136.773924][ T5642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5136.857842][ T5642] bond0 (unregistering): Released all slaves [ 5138.023939][ T5642] hsr_slave_0: left promiscuous mode [ 5138.049824][ T5642] hsr_slave_1: left promiscuous mode [ 5138.230908][ T5642] veth1_macvtap: left promiscuous mode [ 5138.237377][ T5642] veth0_macvtap: left promiscuous mode [ 5138.247718][ T5642] veth1_vlan: left promiscuous mode [ 5138.252465][ T5642] veth0_vlan: left promiscuous mode [ 5192.723417][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5193.630198][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5193.817017][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5194.551438][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5218.589202][ T5866] hsr_slave_0: entered promiscuous mode [ 5218.648986][ T5866] hsr_slave_1: entered promiscuous mode [ 5221.251550][ T5863] hsr_slave_0: entered promiscuous mode [ 5221.331269][ T5863] hsr_slave_1: entered promiscuous mode [ 5221.397711][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 5221.405898][ T5863] Cannot create hsr debugfs directory [ 5241.037197][ T5866] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 5241.909680][ T5866] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 5242.542918][ T5866] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 5243.316062][ T5866] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 5249.912648][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 5250.526356][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 5251.138710][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 5251.751397][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 5275.444019][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5281.138197][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5419.176689][ T5866] veth0_vlan: entered promiscuous mode [ 5420.407404][ T5866] veth1_vlan: entered promiscuous mode [ 5424.976800][ T5863] veth0_vlan: entered promiscuous mode [ 5426.979407][ T5866] veth0_macvtap: entered promiscuous mode [ 5427.671480][ T5863] veth1_vlan: entered promiscuous mode [ 5428.352555][ T5866] veth1_macvtap: entered promiscuous mode [ 5434.399231][ T5534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5434.406646][ T5534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5434.425618][ T5895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5434.476553][ T32] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5434.838709][ T5863] veth0_macvtap: entered promiscuous mode [ 5436.314915][ T5863] veth1_macvtap: entered promiscuous mode [ 5443.816819][ T5519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5443.942018][ T5642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5443.946986][ T5642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5444.168291][ T5642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6090.590465][ T6448] KVM: debugfs: duplicate directory 6448-8 [ 6518.240932][ T5533] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6520.103915][ T5533] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6521.922290][ T5533] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6523.923919][ T5533] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6544.272841][ T5533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6544.429523][ T5533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6544.580016][ T5533] bond0 (unregistering): Released all slaves [ 6546.350754][ T5533] hsr_slave_0: left promiscuous mode [ 6546.450430][ T5533] hsr_slave_1: left promiscuous mode [ 6547.332714][ T5533] veth1_macvtap: left promiscuous mode [ 6547.368747][ T5533] veth0_macvtap: left promiscuous mode [ 6547.407003][ T5533] veth1_vlan: left promiscuous mode [ 6547.412236][ T5533] veth0_vlan: left promiscuous mode [ 6586.850958][ T5533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6588.370983][ T5533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6590.242119][ T5533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6591.719505][ T5533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6615.549549][ T5533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6615.836275][ T5533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6616.047804][ T5533] bond0 (unregistering): Released all slaves [ 6617.968949][ T5533] hsr_slave_0: left promiscuous mode [ 6618.131324][ T5533] hsr_slave_1: left promiscuous mode [ 6619.099907][ T5533] veth1_macvtap: left promiscuous mode [ 6619.101853][ T5533] veth0_macvtap: left promiscuous mode [ 6619.126815][ T5533] veth1_vlan: left promiscuous mode [ 6619.161647][ T5533] veth0_vlan: left promiscuous mode [ 6671.111567][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6671.612430][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6681.413998][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6682.029312][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6709.236723][ T6596] hsr_slave_0: entered promiscuous mode [ 6709.290498][ T6596] hsr_slave_1: entered promiscuous mode [ 6719.193775][ T6602] hsr_slave_0: entered promiscuous mode [ 6719.260920][ T6602] hsr_slave_1: entered promiscuous mode [ 6719.356723][ T6602] debugfs: 'hsr0' already exists in 'hsr' [ 6719.368167][ T6602] Cannot create hsr debugfs directory [ 6737.175455][ T6596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 6738.233636][ T6596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 6739.059410][ T6596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 6740.097983][ T6596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 6747.737210][ T6602] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 6748.282826][ T6602] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 6749.039034][ T6602] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 6749.710693][ T6602] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 6783.473867][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6788.932154][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6962.822533][ T6596] veth0_vlan: entered promiscuous mode [ 6964.109672][ T6596] veth1_vlan: entered promiscuous mode [ 6969.620929][ T6602] veth0_vlan: entered promiscuous mode [ 6970.797503][ T6596] veth0_macvtap: entered promiscuous mode [ 6972.343681][ T6596] veth1_macvtap: entered promiscuous mode [ 6972.642854][ T6602] veth1_vlan: entered promiscuous mode [ 6980.511489][ T6033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6980.725107][ T5026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6980.726673][ T5026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6980.802517][ T5026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6981.498467][ T6602] veth0_macvtap: entered promiscuous mode [ 6983.199003][ T6602] veth1_macvtap: entered promiscuous mode [ 6992.485728][ T6033] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6992.646843][ T5026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6992.768061][ T5026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6993.128171][ T5026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8112.787750][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8116.938351][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8138.763152][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8140.477792][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8168.922080][ T7238] hsr_slave_0: entered promiscuous mode [ 8169.149309][ T7238] hsr_slave_1: entered promiscuous mode [ 8169.213395][ T7238] debugfs: 'hsr0' already exists in 'hsr' [ 8169.329218][ T7238] Cannot create hsr debugfs directory [ 8197.550842][ T7245] hsr_slave_0: entered promiscuous mode [ 8197.692582][ T7245] hsr_slave_1: entered promiscuous mode [ 8197.782638][ T7245] debugfs: 'hsr0' already exists in 'hsr' [ 8197.838651][ T7245] Cannot create hsr debugfs directory [ 8204.624021][ T7238] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 8205.339122][ T7238] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 8206.128212][ T7238] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 8208.528327][ T7238] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 8235.440306][ T7245] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 8236.156779][ T7245] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 8237.022611][ T7245] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 8238.029271][ T7245] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 8269.583312][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8291.591794][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8408.946730][ T27] INFO: task syz.6.825:7233 blocked for more than 430 seconds. [ 8408.999147][ T27] Not tainted syzkaller #0 [ 8409.026236][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 8409.035747][ T27] task:syz.6.825 state:D stack:0 pid:7233 tgid:7232 ppid:6596 task_flags:0x400040 flags:0x00000011 [ 8409.037088][ T27] Call trace: [ 8409.037562][ T27] __switch_to+0x584/0xb00 (T) [ 8409.038176][ T27] __schedule+0x200c/0x3428 [ 8409.038643][ T27] schedule+0xac/0x27c [ 8409.039068][ T27] schedule_timeout+0x68/0x1ec [ 8409.039563][ T27] do_wait_for_common+0x28c/0x440 [ 8409.040000][ T27] wait_for_completion+0x44/0x5c [ 8409.040498][ T27] __synchronize_srcu+0x2a4/0x320 [ 8409.040993][ T27] synchronize_srcu+0x3d0/0x4f8 [ 8409.041528][ T27] mmu_notifier_unregister+0x320/0x428 [ 8409.042030][ T27] kvm_put_kvm+0x698/0xbe0 [ 8409.042459][ T27] kvm_vm_release+0x58/0x78 [ 8409.042900][ T27] __fput+0x4ac/0x978 [ 8409.043340][ T27] fput_close_sync+0xd0/0x240 [ 8409.043763][ T27] __arm64_sys_close+0x8c/0x13c SYZFAIL: failed to recv rpc [ 8409.237233][ T27] invoke_syscall+0x90/0x230 [ 8409.286838][ T27] el0_svc_common+0x120/0x2f4 [ 8409.287583][ T27] do_el0_svc+0x58/0x74 [ 8409.288080][ T27] el0_svc+0x5c/0x238 [ 8409.288595][ T27] el0t_64_sync_handler+0x84/0x12c [ 8409.289070][ T27] el0t_64_sync+0x198/0x19c [ 8409.376577][ T27] INFO: task syz.6.825:7234 blocked for more than 430 seconds. [ 8409.385999][ T27] Not tainted syzkaller #0 [ 8409.386500][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 8409.386763][ T27] task:syz.6.825 state:D stack:0 pid:7234 tgid:7232 ppid:6596 task_flags:0x400040 flags:0x00000011 [ 8409.387509][ T27] Call trace: [ 8409.387767][ T27] __switch_to+0x584/0xb00 (T) [ 8409.388285][ T27] __schedule+0x200c/0x3428 [ 8409.388741][ T27] schedule+0xac/0x27c [ 8409.389178][ T27] schedule_timeout+0x68/0x1ec [ 8409.389690][ T27] do_wait_for_common+0x28c/0x440 [ 8409.390160][ T27] wait_for_completion+0x44/0x5c [ 8409.390625][ T27] __synchronize_srcu+0x2a4/0x320 [ 8409.391110][ T27] synchronize_srcu+0x3d0/0x4f8 [ 8409.391619][ T27] mmu_notifier_unregister+0x320/0x428 [ 8409.392103][ T27] kvm_put_kvm+0x698/0xbe0 [ 8409.392518][ T27] kvm_vm_release+0x58/0x78 [ 8409.392953][ T27] __fput+0x4ac/0x978 [ 8409.393408][ T27] fput_close_sync+0xd0/0x240 [ 8409.393870][ T27] __arm64_sys_close+0x8c/0x13c fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 8409.638123][ T27] invoke_syscall+0x90/0x230 [ 8409.648615][ T27] el0_svc_common+0x120/0x2f4 [ 8409.649283][ T27] do_el0_svc+0x58/0x74 [ 8409.649813][ T27] el0_svc+0x5c/0x238 [ 8409.650322][ T27] el0t_64_sync_handler+0x84/0x12c [ 8409.650819][ T27] el0t_64_sync+0x198/0x19c [ 8409.651769][ T27] [ 8409.651769][ T27] Showing all locks held in the system: [ 8409.652281][ T27] 1 lock held by khungtaskd/27: [ 8409.652681][ T27] #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 8409.836494][ T27] 3 locks held by kworker/u4:2/32: [ 8409.837044][ T27] 2 locks held by getty/3199: [ 8409.837476][ T27] #0: 42f000001231a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 8409.839269][ T27] #1: 0aff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234 [ 8409.841000][ T27] 2 locks held by syz-executor/3333: [ 8409.841374][ T27] 2 locks held by kworker/u4:6/5026: [ 8409.841701][ T27] 2 locks held by kworker/0:6/5500: [ 8409.842002][ T27] 3 locks held by kworker/u4:7/5519: [ 8409.842330][ T27] 3 locks held by kworker/u4:9/5533: [ 8409.842675][ T27] 3 locks held by kworker/u4:12/6033: [ 8409.842986][ T27] 3 locks held by kworker/u4:13/6110: [ 8409.843344][ T27] 2 locks held by kworker/u4:1/6406: [ 8409.843653][ T27] #0: b7f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10 [ 8410.030476][ T27] #1: ffff8000a3d67c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10 [ 8410.032197][ T27] 3 locks held by kworker/u4:15/6737: [ 8410.032589][ T27] 2 locks held by syz.7.823/7226: [ 8410.032920][ T27] 2 locks held by kworker/u4:10/7304: [ 8410.033228][ T27] #0: b7f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10 [ 8410.169782][ T27] #1: ffff80008ff47c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10 [ 8410.171512][ T27] 1 lock held by cmp/7369: [ 8410.171844][ T27] 1 lock held by modprobe/7371: [ 8410.172152][ T27] 1 lock held by modprobe/7372: [ 8410.172612][ T27] [ 8410.172871][ T27] ============================================= [ 8410.172871][ T27] [ 8410.173801][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 8410.183176][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 8410.184563][ T27] Hardware name: linux,dummy-virt (DT) [ 8410.185449][ T27] Call trace: [ 8410.186157][ T27] show_stack+0x2c/0x3c (C) [ 8410.187173][ T27] __dump_stack+0x30/0x40 [ 8410.188129][ T27] dump_stack_lvl+0x30/0x12c [ 8410.189194][ T27] dump_stack+0x1c/0x28 [ 8410.190199][ T27] vpanic+0x1d4/0x4e4 [ 8410.191067][ T27] vpanic+0x0/0x4e4 [ 8410.191931][ T27] hung_task_panic+0x0/0x2c [ 8410.192919][ T27] kthread+0x794/0x99c [ 8410.193909][ T27] ret_from_fork+0x10/0x20 [ 8410.195796][ T27] Kernel Offset: disabled [ 8410.196588][ T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f [ 8410.197638][ T27] Memory Limit: none [ 8410.199888][ T27] Rebooting in 86400 seconds..