last executing test programs: 36m56.00972619s ago: executing program 1 (id=238): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000e79000/0x3000)=nil, 0x930, 0x300000f, 0x1010, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x0, 0x26000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) write$eventfd(r1, &(0x7f0000000000), 0xfffffdef) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r8 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r11, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r11, 0x4004aec2, &(0x7f0000000180)=0x4) ioctl$KVM_GET_REG_LIST(r11, 0xc008aeb0, &(0x7f00000000c0)={0x15e}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x3, 0x1, 0x0}) ioctl$KVM_CREATE_VM(r4, 0x5452, 0x2000fdfd) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) 36m38.478955888s ago: executing program 1 (id=240): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r4}) (async) close(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454d9, 0x25) (async) r11 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) r13 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x240) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000240)={0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xffff, 0xfffffffffffffffb, &(0x7f0000000180)=0x9}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, 0x0) (async) r14 = openat$kvm(0x0, &(0x7f0000000000), 0x222000, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x3, 0x0}) (async) r15 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r15, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r16, 0x400454da, 0x29) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) 36m29.278129064s ago: executing program 1 (id=241): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r3, 0x2, 0x12, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb016bddfb405ee52cc6a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb2070000000000030000000000c20cecfa0a97ab7800", 0x0, 0x48) 36m20.546100932s ago: executing program 1 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000180)={0x1, 0x0, {[0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffff66, 0x2ab3, 0x6, 0x0, 0x1, 0x8000, 0x9, 0x8000000000000001, 0x100000001, 0xa00000, 0x101, 0x7, 0x3], [0x80, 0x6, 0xb, 0xbc1, 0x10000, 0x7, 0x7f, 0x80000000001, 0x8, 0x0, 0x98e, 0x7, 0x2b, 0x3, 0x2, 0x5], [0x3, 0x10001, 0x2, 0x9, 0xffffffffffffffc0, 0x3, 0x7, 0x1, 0xb, 0x4, 0xa1, 0xe7, 0xf98, 0x1, 0x4, 0x9], [0x4, 0x0, 0x9, 0x0, 0x8, 0x1, 0x962a, 0x8, 0x4, 0x1, 0x998, 0x7, 0x4, 0x401, 0xfffffffffffff79f, 0x3]}}) 36m7.153578993s ago: executing program 1 (id=244): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000) munmap(&(0x7f00004ef000/0x2000)=nil, 0x2000) 36m0.196268959s ago: executing program 1 (id=246): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffdffffffffffffe) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x20}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x32) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x8, &(0x7f0000000080)=0x2e09}) r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) r10 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000200)={0x5}) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000f00000/0x4000)=nil, 0x0, 0x3000001, 0x28031, r12, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x10003, 0x0}) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000100)={0x1002000, 0x1}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) 35m12.509522547s ago: executing program 32 (id=246): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000280), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffdffffffffffffe) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x20}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x32) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x8, &(0x7f0000000080)=0x2e09}) r7 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) r10 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000200)={0x5}) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000f00000/0x4000)=nil, 0x0, 0x3000001, 0x28031, r12, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x10003, 0x0}) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000100)={0x1002000, 0x1}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) 25m56.699433207s ago: executing program 0 (id=312): syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x3, 0x289}}, @smc={0x1e, 0x40, {0x84000052, [0x10000, 0x1, 0x1, 0x4, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0x8, 0x7f, 0xffff0000, 0x2}}, @uexit={0x0, 0x18, 0xffffffff80000000}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x5, 0x8}}, @svc={0x122, 0x40, {0x8600ff01, [0x3, 0x0, 0x1, 0x10, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0x5458a896, 0xc}}, @msr={0x14, 0x20, {0x603000000013df75, 0x7ffc}}, @mrs={0xbe, 0x18, {0x603000000013e6dc}}, @its_setup={0x82, 0x28, {0x5, 0x0, 0x3c6}}, @eret={0xe6, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x2, 0x262}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x10f}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x305}}, @uexit={0x0, 0x18, 0x4e}, @mrs={0xbe, 0x18, {0x603000000013c4cc}}, @code={0xa, 0xcc, {"0000400d003c004e20a18ed200a0b8f2e10180d2c20180d2630180d2a40080d2020000d40000c03c601a83d200a0b0f2410180d2220080d2a30180d2e40080d2020000d4c0aa82d200e0b0f2810180d2e20080d2830080d2840180d2020000d4005684d200e0b8f2610180d2620180d2230080d2240180d2020000d4e05989d20000b0f2e10180d2020180d2630080d2840080d2020000d4007008d580769bd20080b8f2c10180d2420180d2c30180d2a40180d2020000d4"}}, @uexit={0x0, 0x18, 0xa64}, @msr={0x14, 0x20, {0x60300000001383c6, 0x9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0xe, 0x59b4, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0xb, 0x2}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0xfffffffffffffffc}, @mrs={0xbe, 0x18, {0x603000000013df54}}, @mrs={0xbe, 0x18, {0x603000000013def4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013deb5}}, @mrs={0xbe, 0x18, {0x603000000013806d}}, @smc={0x1e, 0x40, {0x8c08626a07706eb1, [0xe975, 0x0, 0x2, 0x40, 0x2]}}, @eret={0xe6, 0x18, 0x8000000000000000}, @eret={0xe6, 0x18, 0xfffffffffffffffe}], 0x4cc}, &(0x7f0000000540)=[@featur1={0x1, 0x60}], 0x1) (async) r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x3, 0x289}}, @smc={0x1e, 0x40, {0x84000052, [0x10000, 0x1, 0x1, 0x4, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x0, 0x8, 0x7f, 0xffff0000, 0x2}}, @uexit={0x0, 0x18, 0xffffffff80000000}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x5, 0x8}}, @svc={0x122, 0x40, {0x8600ff01, [0x3, 0x0, 0x1, 0x10, 0x8]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0x5458a896, 0xc}}, @msr={0x14, 0x20, {0x603000000013df75, 0x7ffc}}, @mrs={0xbe, 0x18, {0x603000000013e6dc}}, @its_setup={0x82, 0x28, {0x5, 0x0, 0x3c6}}, @eret={0xe6, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x2, 0x262}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x10f}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x305}}, @uexit={0x0, 0x18, 0x4e}, @mrs={0xbe, 0x18, {0x603000000013c4cc}}, @code={0xa, 0xcc, {"0000400d003c004e20a18ed200a0b8f2e10180d2c20180d2630180d2a40080d2020000d40000c03c601a83d200a0b0f2410180d2220080d2a30180d2e40080d2020000d4c0aa82d200e0b0f2810180d2e20080d2830080d2840180d2020000d4005684d200e0b8f2610180d2620180d2230080d2240180d2020000d4e05989d20000b0f2e10180d2020180d2630080d2840080d2020000d4007008d580769bd20080b8f2c10180d2420180d2c30180d2a40180d2020000d4"}}, @uexit={0x0, 0x18, 0xa64}, @msr={0x14, 0x20, {0x60300000001383c6, 0x9}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0xe, 0x59b4, 0x8, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0xb, 0x2}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0xfffffffffffffffc}, @mrs={0xbe, 0x18, {0x603000000013df54}}, @mrs={0xbe, 0x18, {0x603000000013def4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x1, 0x3, 0x6, 0x0, 0x0, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013deb5}}, @mrs={0xbe, 0x18, {0x603000000013806d}}, @smc={0x1e, 0x40, {0x8c08626a07706eb1, [0xe975, 0x0, 0x2, 0x40, 0x2]}}, @eret={0xe6, 0x18, 0x8000000000000000}, @eret={0xe6, 0x18, 0xfffffffffffffffe}], 0x4cc}, &(0x7f0000000540)=[@featur1={0x1, 0x60}], 0x1) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000580)={0x2, [0x5, 0x8]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) r2 = eventfd2(0x2, 0x80000) r3 = eventfd2(0x60d, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000005c0)={r2, 0x2, 0x1, r3}) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x0, 0x968, 0x5, 0x3}}, @eret={0xe6, 0x18, 0x9}], 0x40}, &(0x7f0000000680)=[@featur1={0x1, 0x8}], 0x1) (async) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[@its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x0, 0x968, 0x5, 0x3}}, @eret={0xe6, 0x18, 0x9}], 0x40}, &(0x7f0000000680)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000006c0)={r3, 0x522, 0x3, r3}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000009c0)={0x0, &(0x7f0000000700)=[@its_setup={0x82, 0x28, {0x1, 0x3, 0x2b8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfffc, 0x9}}, @hvc={0x32, 0x40, {0x800, [0x0, 0x7, 0x0, 0x7, 0x6]}}, @irq_setup={0x46, 0x18, {0x0, 0x7a}}, @smc={0x1e, 0x40, {0xc4000053, [0xfa03, 0x473, 0xc, 0x7fff, 0x8]}}, @svc={0x122, 0x40, {0x1, [0x8, 0x1, 0x1e4e, 0x37, 0x5]}}, @hvc={0x32, 0x40, {0x8600ff01, [0x6, 0x6, 0x12, 0x8000000000000001, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xd, 0x9, 0x1, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013c601}}, @svc={0x122, 0x40, {0x84000014, [0x4, 0x4, 0x7, 0x6c14bb0e, 0x8]}}, @smc={0x1e, 0x40, {0x84000005, [0x9, 0x8, 0x1, 0x8000000000000000, 0x5]}}, @uexit={0x0, 0x18, 0x1}, @hvc={0x32, 0x40, {0x80008000, [0x6, 0x1000, 0x400, 0x7, 0x3]}}, @uexit={0x0, 0x18, 0x1ff}], 0x2a0}, &(0x7f0000000a00)=[@featur2={0x1, 0x25}], 0x1) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000a40)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000a40)={0xc0, 0x0, 0x10000}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000ac0)={0x3, 0x4, 0x2, r3, 0x3}) close(r2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000b00)={0x1, 0x0, 0xfffffffd, 0x0, 0xffff}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3f) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000b40)={0xa8, 0x0, 0x6}) r7 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x300) close(r7) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000c00)=@attr_other={0x0, 0x9, 0x3fe000000000, &(0x7f0000000bc0)=0x2}) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000c00)=@attr_other={0x0, 0x9, 0x3fe000000000, &(0x7f0000000bc0)=0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r6, 0x4018aee3, &(0x7f0000000c80)=@attr_other={0x0, 0x4d41, 0x1, &(0x7f0000000c40)=0x1d29dcb4}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x32002, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000d00)) (async) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f0000000d00)) ioctl$KVM_ARM_PREFERRED_TARGET(r4, 0x8020aeaf, &(0x7f0000000e40)) (async) ioctl$KVM_ARM_PREFERRED_TARGET(r4, 0x8020aeaf, &(0x7f0000000e40)) ioctl$KVM_CAP_PTP_KVM(r6, 0x4068aea3, &(0x7f0000000e80)) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000001300)={0x2710, 0x300, 0x380, &(0x7f0000000f00)=[0x9, 0x8001, 0x3, 0x5c, 0x5, 0x4, 0xffffffffd7606a03, 0x11e, 0x1, 0xc, 0x3, 0x0, 0x100000001, 0x9, 0x3, 0x9, 0x51ec44d, 0x500000, 0x9, 0x309, 0x2, 0xe, 0x2, 0x2, 0x7ff, 0x40, 0xc, 0x7fff, 0x1ff, 0x5, 0x3, 0x46, 0x48b13708, 0x18000000, 0x1000, 0x1, 0xfffffffffffff000, 0x5, 0x2, 0x0, 0x8000000000000001, 0x6, 0x80000000, 0x3, 0x3, 0x1fc00000, 0x3, 0x4, 0x3, 0x400, 0x700000000, 0x4, 0x7, 0xffffffff, 0x8000, 0x8, 0x7fffffff, 0x10000, 0x8000, 0x9, 0x0, 0x2, 0x0, 0x3, 0x4, 0x4, 0xffff, 0x5, 0xffffffffffffff01, 0x0, 0x6, 0x7fffffffffffffff, 0x95da, 0x0, 0x4, 0x2, 0x2, 0x8, 0x6, 0x963, 0x27e3bce5, 0x52, 0x80, 0x9, 0x5f, 0xffffffff00000000, 0x3, 0x81, 0x3, 0x7fffffffffffffff, 0x10000, 0x9, 0xfffffffffffffbff, 0x100, 0x2, 0x1, 0x53da, 0x9, 0x1, 0xff, 0x5, 0x3, 0xffffffff, 0xfffffffffffffff7, 0x1, 0x5, 0x9, 0xd085, 0x5, 0x0, 0x80000001, 0x200, 0xffffffffffffff81, 0x4, 0xaa7, 0x4, 0x1ff000000, 0x864, 0x4, 0x6, 0x3fd3400000000000, 0x7, 0xfef, 0x3, 0x8, 0x800000000, 0x100000000]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000001300)={0x2710, 0x300, 0x380, &(0x7f0000000f00)=[0x9, 0x8001, 0x3, 0x5c, 0x5, 0x4, 0xffffffffd7606a03, 0x11e, 0x1, 0xc, 0x3, 0x0, 0x100000001, 0x9, 0x3, 0x9, 0x51ec44d, 0x500000, 0x9, 0x309, 0x2, 0xe, 0x2, 0x2, 0x7ff, 0x40, 0xc, 0x7fff, 0x1ff, 0x5, 0x3, 0x46, 0x48b13708, 0x18000000, 0x1000, 0x1, 0xfffffffffffff000, 0x5, 0x2, 0x0, 0x8000000000000001, 0x6, 0x80000000, 0x3, 0x3, 0x1fc00000, 0x3, 0x4, 0x3, 0x400, 0x700000000, 0x4, 0x7, 0xffffffff, 0x8000, 0x8, 0x7fffffff, 0x10000, 0x8000, 0x9, 0x0, 0x2, 0x0, 0x3, 0x4, 0x4, 0xffff, 0x5, 0xffffffffffffff01, 0x0, 0x6, 0x7fffffffffffffff, 0x95da, 0x0, 0x4, 0x2, 0x2, 0x8, 0x6, 0x963, 0x27e3bce5, 0x52, 0x80, 0x9, 0x5f, 0xffffffff00000000, 0x3, 0x81, 0x3, 0x7fffffffffffffff, 0x10000, 0x9, 0xfffffffffffffbff, 0x100, 0x2, 0x1, 0x53da, 0x9, 0x1, 0xff, 0x5, 0x3, 0xffffffff, 0xfffffffffffffff7, 0x1, 0x5, 0x9, 0xd085, 0x5, 0x0, 0x80000001, 0x200, 0xffffffffffffff81, 0x4, 0xaa7, 0x4, 0x1ff000000, 0x864, 0x4, 0x6, 0x3fd3400000000000, 0x7, 0xfef, 0x3, 0x8, 0x800000000, 0x100000000]}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2f) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000001380)=@attr_other={0x0, 0x8000, 0xaba4, &(0x7f0000001340)=0x97b}) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000001380)=@attr_other={0x0, 0x8000, 0xaba4, &(0x7f0000001340)=0x97b}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000013c0)={0x8000000000000000, 0xa000, 0x1, r3, 0x1}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000001400)={0xc1000, 0xda7aa9bcedf27bdc, 0xe4, 0x1, 0x6}) 25m50.277501073s ago: executing program 0 (id=313): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close(r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x4}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0x3}) r8 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"7f2003d5"}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x0, 0x81}) 25m47.787716982s ago: executing program 2 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x280603, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xc020660b, 0xe1) 25m40.521528579s ago: executing program 2 (id=315): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0xc, &(0x7f00000001c0)}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0xc, &(0x7f00000001c0)}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="0e762645ef460d569b1d6e9d0bc3ffb2e0e5fc04c6de091974954bd82f1d651d4f99fb370d8c1adacaa508c6f90a5cfd2db8f6a54689e93fdc7057dc1f70d955a9d455767ff0a556", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="0e762645ef460d569b1d6e9d0bc3ffb2e0e5fc04c6de091974954bd82f1d651d4f99fb370d8c1adacaa508c6f90a5cfd2db8f6a54689e93fdc7057dc1f70d955a9d455767ff0a556", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 25m37.613525554s ago: executing program 0 (id=316): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x48040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013c021, &(0x7f0000000140)=0x9}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x9}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 25m31.110223785s ago: executing program 2 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x13, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000003000/0x2000)=nil, 0x930, 0x100000a, 0x10011, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) close(0x5) 25m23.53930852s ago: executing program 0 (id=318): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x400454d0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0x0, 0x0) close(r7) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r7, &(0x7f00000001c0)=0x87, 0xffea) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) 25m19.22989938s ago: executing program 2 (id=319): munmap(&(0x7f0000099000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, r3, 0x1000000, 0xe637a22295c143f8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r5 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r7 = eventfd2(0xfffffffd, 0x80001) write$eventfd(r7, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) 25m11.699707553s ago: executing program 0 (id=320): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r6, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r8, 0x3, 0x11, r7, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, 0xffffffffffffffff, 0x0) 25m1.900975662s ago: executing program 2 (id=321): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x520000, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r3, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 25m0.528956305s ago: executing program 0 (id=322): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x2, 0xb1}}, @eret={0xe6, 0x18, 0x9}], 0x30}, &(0x7f0000000080)=[@featur1={0x1, 0x81}], 0x1) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000005c0)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0x84000002, [0x1, 0x1, 0x8e75, 0xed08e71]}}, @hvc={0x32, 0x40, {0x3f000000, [0x5, 0x7ff, 0x9, 0x8, 0xcef]}}, @code={0xa, 0x6c, {"007008d5c06590d20040b0f2010080d2e20080d2a30180d2c40080d2020000d4007008d5007008d50000008a0070400c402e91d200c0b0f2410080d2c20180d2a30080d2240080d2020000d4e00300b20000c0da007008d5"}}, @uexit={0x0, 0x18, 0x100000000}, @mrs={0xbe, 0x18, {0x603000000013c10a}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x12f}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x2f4}}, @msr={0x14, 0x20, {0x603000000013e536, 0x8}}, @hvc={0x32, 0x40, {0x1000000, [0x1, 0xffffffffffffffff, 0x8, 0xfca4, 0x8]}}, @irq_setup={0x46, 0x18, {0x1, 0xa8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x6}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x0, 0x1}}, @msr={0x14, 0x20, {0x603000000013803f, 0x10000}}, @uexit={0x0, 0x18, 0x1b}, @code={0xa, 0xb4, {"000008d5205b95d20060b8f2410080d2620180d2230180d2a40180d2020000d4000008d5e07786d20020b8f2610180d2a20080d2230080d2640180d2020000d4c09696d20040b0f2810080d2c20080d2630180d2c40180d2020000d4000028d580ae97d200e0b8f2c10080d2a20180d2230180d2e40180d2020000d4406a9bd20080b8f2410180d2020180d2830180d2040180d2020000d40004006e007008d5"}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013df7b, 0x594}}, @smc={0x1e, 0x40, {0x8600ff01, [0x6, 0x5294, 0x2, 0x166, 0x4d6c2df6]}}, @smc={0x1e, 0x40, {0x800, [0x101, 0xa44e, 0xb7e3, 0x3, 0x912]}}, @uexit={0x0, 0x18, 0x100000001}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x1d4}}, @svc={0x122, 0x40, {0x86000000, [0x8, 0xba, 0x0, 0x7a, 0x5]}}, @eret={0xe6, 0x18, 0x5}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0x97cb}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x24d}}], 0x4d8}, &(0x7f0000000600)=[@featur1={0x1, 0xa0}], 0x1) r3 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x180) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x4, 0x0, &(0x7f0000000640)=0x9}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x88d) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0xb}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000700)={0x3, 0x400}) r5 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000cc0)={0x0, &(0x7f0000000740)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x3, 0x1}}, @uexit={0x0, 0x18, 0x1}, @smc={0x1e, 0x40, {0x84000003, [0x9325, 0x3, 0x2, 0x6, 0x6791]}}, @irq_setup={0x46, 0x18, {0x3, 0x355}}, @memwrite={0x6e, 0x30, @generic={0x58000, 0xde6, 0x10, 0x1}}, @svc={0x122, 0x40, {0x84000008, [0x9, 0x1, 0x100, 0x6]}}, @svc={0x122, 0x40, {0xc4000053, [0x100, 0x6, 0x6, 0x1ff, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x1, 0x0, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x307}}, @mrs={0xbe, 0x18, {0x603000000013deb3}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x77}}, @mrs={0xbe, 0x18, {0x603000000013c01c}}, @svc={0x122, 0x40, {0x4000, [0x200, 0x3, 0x8000000000000000, 0xf13c, 0x6]}}, @irq_setup={0x46, 0x18, {0x4, 0x264}}, @msr={0x14, 0x20, {0x603000000013df67, 0x6}}, @code={0xa, 0x84, {"008008d50080800c60489bd20020b8f2610080d2820180d2030180d2040180d2020000d40000006b00c0005f407e87d200c0b0f2a10180d2c20080d2e30080d2040080d2020000d4007008d5000c8078a06386d20020b0f2010180d2420180d2430180d2a40180d2020000d4001c0053"}}, @code={0xa, 0xb4, {"008008d5e0bf9dd20020b8f2210180d2c20080d2a30080d2e40180d2020000d4e0b18cd200a0b0f2010180d2420180d2030080d2c40180d2020000d4a0be81d20040b0f2410180d2e20080d2e30080d2c40080d2020000d4a08b96d20040b0f2e10080d2620080d2830080d2240080d2020000d4008008d5a02480d20040b8f2e10180d2020080d2030080d2e40180d2020000d40060800d007008d5000028d5"}}, @hvc={0x32, 0x40, {0x80003fff, [0x4, 0x1, 0x80000001]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x4b}}, @smc={0x1e, 0x40, {0xc4000014, [0x8, 0x5, 0x6, 0x0, 0x1]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x175}}, @uexit={0x0, 0x18, 0x8000}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x156}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xc00, 0x7, 0x8}}, @irq_setup={0x46, 0x18, {0x1, 0x161}}, @eret={0xe6, 0x18, 0x8000}, @irq_setup={0x46, 0x18, {0x1, 0x1ab}}, @msr={0x14, 0x20, {0x60300000001383c6, 0x100000000}}], 0x550}, &(0x7f0000000d00)=[@featur1={0x1, 0x48}], 0x1) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000d40)={0x5d, "259966b7d18e4c519cf860dbe5bf5d125c28914910e65832ddbadaa4883a41d0083bc49051b126cade802a1e2a6f6a58c6ec8bf6b53a3386dd4704d6af8380c1c53e4b1a9c0e2b06c8478eab2ab8663af7f966f9f8e2b0546660337b7f"}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000e00)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000dc0)=0xa86}) r6 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000e40)={0x2710, 0x0, &(0x7f0000e47000/0x3000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000e80)={0xe, 0x4, 0x2}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000f00)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000ec0)={0x800, 0x9, 0x1}}) syz_kvm_vgic_v3_setup(r4, 0x4, 0x2c0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000f80)={r6, 0x0, 0x2, r6}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000fc0)={0x10003, 0x0, {[0x3f8, 0x1, 0xbd5, 0x7, 0x9, 0x3, 0x3, 0x862, 0x7f, 0x0, 0x7, 0x7, 0x5, 0x1, 0x0, 0x1], [0x8000000000000000, 0xfffffffffffffffc, 0x80, 0x3, 0x7, 0x0, 0x5, 0xfff, 0x6, 0x5, 0x846d, 0x401, 0xfa5, 0xeb, 0x8, 0x1], [0xf2, 0x91a7, 0x4890000000000, 0x9, 0x2, 0x2, 0x1, 0x1, 0x2, 0x7, 0x3, 0x93a, 0x98c, 0x7, 0x3, 0x5], [0x80, 0xc80, 0xd23, 0x0, 0x6, 0xd563, 0x85e1, 0xffffffffffffffff, 0x4, 0x10000, 0x1, 0xfffffffffffffff9, 0x9, 0xfffffffffffffeff, 0xfffffffffffffffd, 0x2]}}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x6) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f0000001240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001200)={0x3, 0x5, 0x2}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000001280)={0xffff1000, 0x105000}) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f00000012c0)) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000001340)=@arm64_bitmap={0x6030000000160000, &(0x7f0000001300)=0x2}) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000001680)={0x0, &(0x7f0000001380)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x9, 0xb}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x9c, {"00b4207e008008d5007008d5004c83d20000b0f2410180d2820180d2230080d2e40180d2020000d440e382d200a0b8f2810080d2a20180d2030080d2c40080d2020000d4000860f80034002f007008d5401486d200e0b8f2a10080d2220080d2230080d2a40080d2020000d4406689d200e0b8f2010080d2620080d2630080d2640180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013c3a0}}, @svc={0x122, 0x40, {0x8400000a, [0x5, 0x7b1, 0x3, 0x6, 0x81]}}, @mrs={0xbe, 0x18, {0x603000000013c640}}, @code={0xa, 0xb4, {"007008d5c0859dd200a0b0f2810080d2020180d2a30180d2a40080d2020000d4c0e184d20020b8f2010180d2220180d2630080d2840080d2020000d4400e80d200c0b8f2c10180d2c20180d2230180d2440180d2020000d4008008d5002193d200c0b0f2e10180d2220080d2c30080d2e40080d2020000d4007008d540959cd20060b0f2010080d2020180d2230080d2640080d2020000d400eca07e00e4a07e"}}, @svc={0x122, 0x40, {0xc400000e, [0x1000, 0x4, 0x3, 0xfffffffffffffcb7, 0x7]}}, @msr={0x14, 0x20, {0x603000000013df6b, 0x79f}}, @eret={0xe6, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x0, 0x87}}, @svc={0x122, 0x40, {0x84000003, [0x95d5, 0xf, 0x4, 0x5, 0xf05f]}}, @eret={0xe6, 0x18, 0xffffffffffffffff}], 0x2f0}, &(0x7f00000016c0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000001700)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33) 24m55.675594917s ago: executing program 2 (id=323): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f00004d2000/0x3000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 24m14.722528703s ago: executing program 33 (id=322): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x2, 0xb1}}, @eret={0xe6, 0x18, 0x9}], 0x30}, &(0x7f0000000080)=[@featur1={0x1, 0x81}], 0x1) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000005c0)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0x84000002, [0x1, 0x1, 0x8e75, 0xed08e71]}}, @hvc={0x32, 0x40, {0x3f000000, [0x5, 0x7ff, 0x9, 0x8, 0xcef]}}, @code={0xa, 0x6c, {"007008d5c06590d20040b0f2010080d2e20080d2a30180d2c40080d2020000d4007008d5007008d50000008a0070400c402e91d200c0b0f2410080d2c20180d2a30080d2240080d2020000d4e00300b20000c0da007008d5"}}, @uexit={0x0, 0x18, 0x100000000}, @mrs={0xbe, 0x18, {0x603000000013c10a}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x12f}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x2f4}}, @msr={0x14, 0x20, {0x603000000013e536, 0x8}}, @hvc={0x32, 0x40, {0x1000000, [0x1, 0xffffffffffffffff, 0x8, 0xfca4, 0x8]}}, @irq_setup={0x46, 0x18, {0x1, 0xa8}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x6}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x0, 0x1}}, @msr={0x14, 0x20, {0x603000000013803f, 0x10000}}, @uexit={0x0, 0x18, 0x1b}, @code={0xa, 0xb4, {"000008d5205b95d20060b8f2410080d2620180d2230180d2a40180d2020000d4000008d5e07786d20020b8f2610180d2a20080d2230080d2640180d2020000d4c09696d20040b0f2810080d2c20080d2630180d2c40180d2020000d4000028d580ae97d200e0b8f2c10080d2a20180d2230180d2e40180d2020000d4406a9bd20080b8f2410180d2020180d2830180d2040180d2020000d40004006e007008d5"}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013df7b, 0x594}}, @smc={0x1e, 0x40, {0x8600ff01, [0x6, 0x5294, 0x2, 0x166, 0x4d6c2df6]}}, @smc={0x1e, 0x40, {0x800, [0x101, 0xa44e, 0xb7e3, 0x3, 0x912]}}, @uexit={0x0, 0x18, 0x100000001}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x1d4}}, @svc={0x122, 0x40, {0x86000000, [0x8, 0xba, 0x0, 0x7a, 0x5]}}, @eret={0xe6, 0x18, 0x5}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0x97cb}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x24d}}], 0x4d8}, &(0x7f0000000600)=[@featur1={0x1, 0xa0}], 0x1) r3 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x180) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000680)=@attr_arm64={0x0, 0x4, 0x0, &(0x7f0000000640)=0x9}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x88d) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000006c0)={0xb}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000700)={0x3, 0x400}) r5 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000cc0)={0x0, &(0x7f0000000740)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x3, 0x1}}, @uexit={0x0, 0x18, 0x1}, @smc={0x1e, 0x40, {0x84000003, [0x9325, 0x3, 0x2, 0x6, 0x6791]}}, @irq_setup={0x46, 0x18, {0x3, 0x355}}, @memwrite={0x6e, 0x30, @generic={0x58000, 0xde6, 0x10, 0x1}}, @svc={0x122, 0x40, {0x84000008, [0x9, 0x1, 0x100, 0x6]}}, @svc={0x122, 0x40, {0xc4000053, [0x100, 0x6, 0x6, 0x1ff, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x3, 0x1, 0x0, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x307}}, @mrs={0xbe, 0x18, {0x603000000013deb3}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x77}}, @mrs={0xbe, 0x18, {0x603000000013c01c}}, @svc={0x122, 0x40, {0x4000, [0x200, 0x3, 0x8000000000000000, 0xf13c, 0x6]}}, @irq_setup={0x46, 0x18, {0x4, 0x264}}, @msr={0x14, 0x20, {0x603000000013df67, 0x6}}, @code={0xa, 0x84, {"008008d50080800c60489bd20020b8f2610080d2820180d2030180d2040180d2020000d40000006b00c0005f407e87d200c0b0f2a10180d2c20080d2e30080d2040080d2020000d4007008d5000c8078a06386d20020b0f2010180d2420180d2430180d2a40180d2020000d4001c0053"}}, @code={0xa, 0xb4, {"008008d5e0bf9dd20020b8f2210180d2c20080d2a30080d2e40180d2020000d4e0b18cd200a0b0f2010180d2420180d2030080d2c40180d2020000d4a0be81d20040b0f2410180d2e20080d2e30080d2c40080d2020000d4a08b96d20040b0f2e10080d2620080d2830080d2240080d2020000d4008008d5a02480d20040b8f2e10180d2020080d2030080d2e40180d2020000d40060800d007008d5000028d5"}}, @hvc={0x32, 0x40, {0x80003fff, [0x4, 0x1, 0x80000001]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x4b}}, @smc={0x1e, 0x40, {0xc4000014, [0x8, 0x5, 0x6, 0x0, 0x1]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x175}}, @uexit={0x0, 0x18, 0x8000}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x156}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xc00, 0x7, 0x8}}, @irq_setup={0x46, 0x18, {0x1, 0x161}}, @eret={0xe6, 0x18, 0x8000}, @irq_setup={0x46, 0x18, {0x1, 0x1ab}}, @msr={0x14, 0x20, {0x60300000001383c6, 0x100000000}}], 0x550}, &(0x7f0000000d00)=[@featur1={0x1, 0x48}], 0x1) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000d40)={0x5d, "259966b7d18e4c519cf860dbe5bf5d125c28914910e65832ddbadaa4883a41d0083bc49051b126cade802a1e2a6f6a58c6ec8bf6b53a3386dd4704d6af8380c1c53e4b1a9c0e2b06c8478eab2ab8663af7f966f9f8e2b0546660337b7f"}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000e00)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000dc0)=0xa86}) r6 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000e40)={0x2710, 0x0, &(0x7f0000e47000/0x3000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000e80)={0xe, 0x4, 0x2}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000f00)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000ec0)={0x800, 0x9, 0x1}}) syz_kvm_vgic_v3_setup(r4, 0x4, 0x2c0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x40000, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000f80)={r6, 0x0, 0x2, r6}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f0000000fc0)={0x10003, 0x0, {[0x3f8, 0x1, 0xbd5, 0x7, 0x9, 0x3, 0x3, 0x862, 0x7f, 0x0, 0x7, 0x7, 0x5, 0x1, 0x0, 0x1], [0x8000000000000000, 0xfffffffffffffffc, 0x80, 0x3, 0x7, 0x0, 0x5, 0xfff, 0x6, 0x5, 0x846d, 0x401, 0xfa5, 0xeb, 0x8, 0x1], [0xf2, 0x91a7, 0x4890000000000, 0x9, 0x2, 0x2, 0x1, 0x1, 0x2, 0x7, 0x3, 0x93a, 0x98c, 0x7, 0x3, 0x5], [0x80, 0xc80, 0xd23, 0x0, 0x6, 0xd563, 0x85e1, 0xffffffffffffffff, 0x4, 0x10000, 0x1, 0xfffffffffffffff9, 0x9, 0xfffffffffffffeff, 0xfffffffffffffffd, 0x2]}}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x6) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f0000001240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001200)={0x3, 0x5, 0x2}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000001280)={0xffff1000, 0x105000}) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f00000012c0)) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000001340)=@arm64_bitmap={0x6030000000160000, &(0x7f0000001300)=0x2}) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000001680)={0x0, &(0x7f0000001380)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x9, 0xb}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x9c, {"00b4207e008008d5007008d5004c83d20000b0f2410180d2820180d2230080d2e40180d2020000d440e382d200a0b8f2810080d2a20180d2030080d2c40080d2020000d4000860f80034002f007008d5401486d200e0b8f2a10080d2220080d2230080d2a40080d2020000d4406689d200e0b8f2010080d2620080d2630080d2640180d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013c3a0}}, @svc={0x122, 0x40, {0x8400000a, [0x5, 0x7b1, 0x3, 0x6, 0x81]}}, @mrs={0xbe, 0x18, {0x603000000013c640}}, @code={0xa, 0xb4, {"007008d5c0859dd200a0b0f2810080d2020180d2a30180d2a40080d2020000d4c0e184d20020b8f2010180d2220180d2630080d2840080d2020000d4400e80d200c0b8f2c10180d2c20180d2230180d2440180d2020000d4008008d5002193d200c0b0f2e10180d2220080d2c30080d2e40080d2020000d4007008d540959cd20060b0f2010080d2020180d2230080d2640080d2020000d400eca07e00e4a07e"}}, @svc={0x122, 0x40, {0xc400000e, [0x1000, 0x4, 0x3, 0xfffffffffffffcb7, 0x7]}}, @msr={0x14, 0x20, {0x603000000013df6b, 0x79f}}, @eret={0xe6, 0x18, 0x2}, @irq_setup={0x46, 0x18, {0x0, 0x87}}, @svc={0x122, 0x40, {0x84000003, [0x95d5, 0xf, 0x4, 0x5, 0xf05f]}}, @eret={0xe6, 0x18, 0xffffffffffffffff}], 0x2f0}, &(0x7f00000016c0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000001700)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33) 24m8.221620975s ago: executing program 34 (id=323): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r1, 0x4010aeb5, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f00004d2000/0x3000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 18m41.918287529s ago: executing program 3 (id=324): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xb6) syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x5d1000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1b) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0x401c5820, 0x8000000000000001) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0xffff7000, 0x4000}) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@msr={0x14, 0x20, {0x603000000013c65f, 0x8001}}], 0x20}, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@msr={0x14, 0x20, {0x603000000013c2a4, 0x1}}], 0x20}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) r15 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r16, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) 18m19.027336195s ago: executing program 3 (id=326): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x7, 0x25000, 0x1000, &(0x7f0000d81000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x7, 0x25000, 0x1000, &(0x7f0000d81000/0x1000)=nil}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x17d, 0x200}}) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bc2000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800000006) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x14) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000000c0)={0x3, 0x0, [{0x40, 0x5, 0x1, 0x0, @sint={0x8, 0x81}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x7, 0xb}}, {0x9, 0x4, 0x0, 0x0, @sint={0x6, 0x9}}]}) (async) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000000c0)={0x3, 0x0, [{0x40, 0x5, 0x1, 0x0, @sint={0x8, 0x81}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x7, 0xb}}, {0x9, 0x4, 0x0, 0x0, @sint={0x6, 0x9}}]}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x444802, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x444802, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r11 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r11, &(0x7f0000000200)=0x8, 0x8) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) close(0x4) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 17m59.538093815s ago: executing program 4 (id=325): munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x98800, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0)=0xffffff7f, 0xff25) 17m56.922761174s ago: executing program 3 (id=327): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0xeeee8000, 0x108000, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7ff) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000c, [0x1, 0x4, 0x3, 0x100000000]}}, @irq_setup={0x46, 0x18, {0x4, 0x238}}, @smc={0x1e, 0x40, {0x87000005, [0x10, 0xfffffffffffff31c, 0x3ff, 0xb86, 0x10000]}}, @mrs={0xbe, 0x18, {0x603000000013dee9}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0xf, 0x3c, 0x502, 0x2}}, @svc={0x122, 0x40, {0x7f00000c, [0x60a, 0x52e9, 0x3, 0x5d76, 0x9a]}}, @mrs={0xbe, 0x18, {0x603000000013c100}}], 0x130}, &(0x7f0000000240)=[@featur1={0x1, 0x41}], 0x1) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000280)=0x7}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x5, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0xeeee8000, 0x108000, 0x1}) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) (async) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7ff) (async) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5}) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000c, [0x1, 0x4, 0x3, 0x100000000]}}, @irq_setup={0x46, 0x18, {0x4, 0x238}}, @smc={0x1e, 0x40, {0x87000005, [0x10, 0xfffffffffffff31c, 0x3ff, 0xb86, 0x10000]}}, @mrs={0xbe, 0x18, {0x603000000013dee9}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0xf, 0x3c, 0x502, 0x2}}, @svc={0x122, 0x40, {0x7f00000c, [0x60a, 0x52e9, 0x3, 0x5d76, 0x9a]}}, @mrs={0xbe, 0x18, {0x603000000013c100}}], 0x130}, &(0x7f0000000240)=[@featur1={0x1, 0x41}], 0x1) (async) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000280)=0x7}) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x5, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) 17m44.461940768s ago: executing program 4 (id=328): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000000)=0x3}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)=0x80000001}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x6030000000138002}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x2, &(0x7f0000000080)=0xffff}) 17m9.100272791s ago: executing program 35 (id=327): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0xeeee8000, 0x108000, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7ff) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r9 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000c, [0x1, 0x4, 0x3, 0x100000000]}}, @irq_setup={0x46, 0x18, {0x4, 0x238}}, @smc={0x1e, 0x40, {0x87000005, [0x10, 0xfffffffffffff31c, 0x3ff, 0xb86, 0x10000]}}, @mrs={0xbe, 0x18, {0x603000000013dee9}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0xf, 0x3c, 0x502, 0x2}}, @svc={0x122, 0x40, {0x7f00000c, [0x60a, 0x52e9, 0x3, 0x5d76, 0x9a]}}, @mrs={0xbe, 0x18, {0x603000000013c100}}], 0x130}, &(0x7f0000000240)=[@featur1={0x1, 0x41}], 0x1) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000280)=0x7}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x5, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0xeeee8000, 0x108000, 0x1}) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x31) (async) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7ff) (async) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000400)=@arm64_sys={0x603000000013c000, &(0x7f00000003c0)=0x3a5}) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[@smc={0x1e, 0x40, {0x8400000c, [0x1, 0x4, 0x3, 0x100000000]}}, @irq_setup={0x46, 0x18, {0x4, 0x238}}, @smc={0x1e, 0x40, {0x87000005, [0x10, 0xfffffffffffff31c, 0x3ff, 0xb86, 0x10000]}}, @mrs={0xbe, 0x18, {0x603000000013dee9}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x2, 0xf, 0x3c, 0x502, 0x2}}, @svc={0x122, 0x40, {0x7f00000c, [0x60a, 0x52e9, 0x3, 0x5d76, 0x9a]}}, @mrs={0xbe, 0x18, {0x603000000013c100}}], 0x130}, &(0x7f0000000240)=[@featur1={0x1, 0x41}], 0x1) (async) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000280)=0x7}) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x5, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) 16m53.739347322s ago: executing program 36 (id=328): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000000)=0x3}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000140)=0x80000001}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x6030000000138002}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x2, 0x2, &(0x7f0000000080)=0xffff}) 2m48.399530108s ago: executing program 5 (id=361): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xc, 0x6832, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, 0x0) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000080)={0x3}) 2m29.520737382s ago: executing program 5 (id=363): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80280, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0x0, &(0x7f00000001c0), 0x200000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x240000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0xdd, 0x4, 0x0, r4}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x9, 0xee9, &(0x7f0000000240)=0x7}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a89000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0xdddd0000, 0x2000, &(0x7f000000a000/0x2000)=nil}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000100)={0xe4, 0x0, 0x80}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000e77000/0x1000)=nil, 0x0, 0x2000000, 0x12, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x1000001, 0x10010, r7, 0x0) r9 = eventfd2(0xfffffffd, 0x1) close(r9) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r4, &(0x7f0000000280)=0xffffffffffffca16, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m26.338008303s ago: executing program 6 (id=364): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)=@arm64_sve={0x6080000000150439, 0x0}) 2m6.763633619s ago: executing program 6 (id=365): ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x8, 0x1, &(0x7f00000000c0)=0x1ff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r4 = eventfd2(0x3ff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x10, 0x3, &(0x7f0000000180)=0xa28}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4}) write$eventfd(r4, &(0x7f0000000080)=0x7, 0x8) 2m5.270584633s ago: executing program 5 (id=366): ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x9e1ab645b8e901cc, 0x4, &(0x7f0000000180)=0xf}) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000200)=[@uexit={0x0, 0x18, 0xffffffffffffffff}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x291}}, @smc={0x1e, 0x40, {0x80000000, [0x2, 0x8, 0x200, 0xffffffffffffffff, 0x101]}}, @uexit={0x0, 0x18, 0x8000000000000000}, @its_send_cmd={0xaa, 0x28, {0x7, 0x1, 0x0, 0xa, 0x4, 0x1, 0x4}}, @code={0xa, 0xcc, {"00c0df0d000028d520d980d20020b8f2810180d2820080d2030180d2040080d2020000d4604d95d20080b8f2010180d2a20080d2830180d2640180d2020000d400409f0d609589d20040b0f2010180d2a20080d2630180d2440080d2020000d4007008d5a0cc9cd200c0b0f2810180d2e20180d2c30080d2040180d2020000d4408894d20060b8f2210080d2420080d2c30180d2440180d2020000d4c02f87d20020b8f2e10080d2c20080d2030080d2c40180d2020000d4"}}, @uexit={0x0, 0x18, 0xfffffffffffffeff}, @svc={0x122, 0x40, {0x1080000a6, [0x8000000000000000, 0x6, 0x3, 0x4, 0xffff]}}, @irq_setup={0x46, 0x18, {0x1, 0x277}}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x2, 0x0, 0x4a}}, @svc={0x122, 0x40, {0xc4000007, [0x100000000, 0x1000, 0x400, 0xeb05, 0x1f541f51]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x21e}}, @uexit={0x0, 0x18, 0x7f}, @eret={0xe6, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013e649, 0x7fffffff}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x1, 0x0, 0x10, 0x8, 0x9, 0x3}}, @msr={0x14, 0x20, {0x63f4, 0xdc}}, @msr={0x14, 0x20, {0x603000000013e728, 0xe}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xffd0, 0x28, 0x3}}, @irq_setup={0x46, 0x18, {0x3, 0x24c}}, @code={0xa, 0x84, {"000028d5007008d520c69ad200a0b8f2610080d2020180d2430080d2240180d2020000d40070c00c008008d5000008d5008008d5007008d5005c96d20020b8f2e10080d2e20080d2630080d2440180d2020000d4c0579bd20060b0f2610080d2220080d2c30080d2640080d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013c013, 0x5}}], 0x430}, &(0x7f0000000680)=[@featur2={0x1, 0x4}], 0x1) syz_kvm_setup_cpu$arm64(r0, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000d00)=[{0x0, &(0x7f00000006c0)=[@irq_setup={0x46, 0x18, {0x0, 0x348}}, @code={0xa, 0xb4, {"0084004f00048038802093d20020b0f2e10080d2420080d2630180d2240180d2020000d4a03997d200e0b8f2a10080d2220180d2430080d2440080d2020000d4a0d693d20000b0f2810080d2420180d2230180d2c40180d2020000d400a09f0c000008d5406585d200c0b0f2810180d2020180d2a30080d2840080d2020000d4a0f298d20080b8f2010080d2220180d2230180d2c40080d2020000d4008008d5"}}, @mrs={0xbe, 0x18, {0x603000000013e6c2}}, @irq_setup={0x46, 0x18, {0x1, 0x370}}, @eret={0xe6, 0x18, 0x8000000000000001}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18}, @code={0xa, 0x84, {"007008d50000c093008008d5c0db94d200e0b0f2410080d2020180d2430180d2840080d2020000d4008008d5007008d5804c95d20060b0f2e10180d2e20080d2a30080d2640080d2020000d4007008d540b285d20060b0f2a10180d2c20080d2630080d2240080d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x603000000013807f, 0x4}}, @eret={0xe6, 0x18, 0x5}, @mrs={0xbe, 0x18, {0x603000000013df1a}}, @code={0xa, 0x9c, {"e07583d20060b0f2e10080d2820080d2230180d2040180d2020000d420d69bd20020b0f2e10180d2420180d2430180d2e40080d2020000d40000291e00a4200d007008d5e0729dd20080b0f2810180d2a20180d2630180d2c40180d2020000d4007008d500fca05e607e90d20040b8f2410080d2620080d2e30080d2440180d2020000d40080c088"}}, @msr={0x14, 0x20, {0x603000000013def8, 0x9}}, @memwrite={0x6e, 0x30, @generic={0xffffffff, 0xc5d, 0xfffffffffffffffa, 0x1}}, @smc={0x1e, 0x40, {0x8600ff01, [0x9, 0x3, 0x9, 0x0, 0x6]}}, @hvc={0x32, 0x40, {0x32000000, [0xffff, 0x80000001, 0x3, 0x8, 0x4]}}, @eret={0xe6, 0x18, 0x2}, @hvc={0x32, 0x40, {0xc5000020, [0x8, 0xff, 0x7, 0x0, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013c684}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x7, 0x1}}, @hvc={0x32, 0x40, {0x80007fff, [0xb5, 0x0, 0x8, 0x29, 0x6]}}, @hvc={0x32, 0x40, {0x84000012, [0xd, 0xcff, 0x2, 0x6, 0x8]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x5, 0xff, 0x5, 0x3}}, @hvc={0x32, 0x40, {0x84000000, [0x4, 0x7ff, 0x1, 0x7, 0x5]}}, @irq_setup={0x46, 0x18, {0x0, 0x126}}, @mrs={0xbe, 0x18, {0x603000000013df7e}}, @smc={0x1e, 0x40, {0x84000050, [0x2, 0xfff, 0x4, 0x40000000]}}, @hvc={0x32, 0x40, {0x32000000, [0x4f, 0x4, 0xfffffffffffffffa, 0x2, 0x4]}}, @msr={0x14, 0x20, {0x603000000013f090, 0x8}}, @msr={0x14, 0x20, {0x603000000013deec, 0xc}}], 0x614}], 0x1, 0x0, &(0x7f0000000d40), 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000dc0)=@attr_other={0x0, 0x50ead24a, 0x4, &(0x7f0000000d80)=0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000e40)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000e00)=0x11}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000e80)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000f00)=@attr_arm64={0x0, 0x6, 0x0, &(0x7f0000000ec0)=0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) r5 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) ioctl$KVM_CAP_ARM_MTE(r0, 0x4068aea3, &(0x7f0000000f40)) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000001000)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000fc0)=0x1b}) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000001080)=@attr_other={0x0, 0x939, 0x1000, &(0x7f0000001040)=0x4}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000010c0)=0x7) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000001100)={0x7, 0x7}) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000001180)=@arm64_ccsidr={0x6020000000110001, &(0x7f0000001140)=0x6}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000011c0)={0xa}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001200)=@x86={0x2, 0xd, 0x6, 0x0, 0x7f, 0xbb, 0x1, 0xb, 0x0, 0x6, 0x4, 0x2, 0x0, 0x3, 0x4, 0x6, 0x61, 0x8, 0x4, '\x00', 0x5}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000001240)={0x3ff, 0x9000, 0x0, r5}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000012c0)=@attr_arm64={0x0, 0x3, 0x2, &(0x7f0000001280)=0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x402040, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000001380)=@attr_arm64={0x0, 0x4, 0x3, &(0x7f0000001340)=0x3}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000013c0)) 1m49.693755816s ago: executing program 5 (id=367): r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) eventfd2(0x100, 0x800) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r2 = eventfd2(0x2, 0x1000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeef6800, 0x8, r2}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x7, 0x4}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x100000c, 0x4d832, 0xffffffffffffffff, 0x0) 1m49.180003528s ago: executing program 6 (id=368): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4681, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.946908335s ago: executing program 5 (id=369): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x9}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) 1m31.507642202s ago: executing program 6 (id=370): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000f3e000/0x2000)=nil, r0, 0x100000d, 0x1010, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, 0xffffffffffffffff, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000700)={0x7, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000240)={0x200002f}) (async) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@irq_setup={0x5, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) (rerun: 64) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) (async, rerun: 32) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 32) r12 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x240) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1m11.570112898s ago: executing program 6 (id=371): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r4, 0x400454c8, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x78, 0x0}) 1m9.699320656s ago: executing program 5 (id=372): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a89000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0xdddd0000, 0x2000, &(0x7f000000a000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) 49.847881786s ago: executing program 6 (id=373): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)=@arm64_bitmap={0x6030000000160006, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000e1c000/0x2000)=nil, r4, 0x1000000, 0x10, r5, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 21.071121836s ago: executing program 37 (id=372): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a89000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0xdddd0000, 0x2000, &(0x7f000000a000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r4, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) 0s ago: executing program 38 (id=373): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)=@arm64_bitmap={0x6030000000160006, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000e1c000/0x2000)=nil, r4, 0x1000000, 0x10, r5, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xe4, 0x0, 0x1000}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) kernel console output (not intermixed with test programs): [ 413.759052][ T3169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.362669][ T3169] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:6132' (ED25519) to the list of known hosts. [ 639.688278][ T25] audit: type=1400 audit(638.850:61): avc: denied { name_bind } for pid=3326 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 641.549522][ T25] audit: type=1400 audit(640.740:62): avc: denied { execute } for pid=3327 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 641.605372][ T25] audit: type=1400 audit(640.760:63): avc: denied { execute_no_trans } for pid=3327 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 668.778014][ T25] audit: type=1400 audit(667.960:64): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 668.843353][ T25] audit: type=1400 audit(668.030:65): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 668.936266][ T3327] cgroup: Unknown subsys name 'net' [ 669.009339][ T25] audit: type=1400 audit(668.200:66): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 669.500855][ T3327] cgroup: Unknown subsys name 'cpuset' [ 669.648052][ T3327] cgroup: Unknown subsys name 'rlimit' [ 670.658519][ T25] audit: type=1400 audit(669.850:67): avc: denied { setattr } for pid=3327 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.678773][ T25] audit: type=1400 audit(669.860:68): avc: denied { mounton } for pid=3327 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 670.708638][ T25] audit: type=1400 audit(669.890:69): avc: denied { mount } for pid=3327 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 671.788187][ T3331] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 671.810728][ T25] audit: type=1400 audit(671.000:70): avc: denied { relabelto } for pid=3331 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 671.832795][ T25] audit: type=1400 audit(671.020:71): avc: denied { write } for pid=3331 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 672.033148][ T25] audit: type=1400 audit(671.220:72): avc: denied { read } for pid=3327 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 672.060097][ T25] audit: type=1400 audit(671.240:73): avc: denied { open } for pid=3327 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 672.105115][ T3327] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 730.170166][ T25] audit: type=1400 audit(729.360:74): avc: denied { execmem } for pid=3332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 734.122543][ T25] audit: type=1400 audit(733.310:75): avc: denied { read } for pid=3335 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 734.142834][ T25] audit: type=1400 audit(733.330:76): avc: denied { open } for pid=3334 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 734.220892][ T25] audit: type=1400 audit(733.410:77): avc: denied { mounton } for pid=3335 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 734.465217][ T25] audit: type=1400 audit(733.650:78): avc: denied { module_request } for pid=3334 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 734.510136][ T25] audit: type=1400 audit(733.670:79): avc: denied { module_request } for pid=3335 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 735.560817][ T25] audit: type=1400 audit(734.740:80): avc: denied { sys_module } for pid=3335 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 758.980337][ T3335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.409199][ T3335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.489066][ T3334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.748300][ T3334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.445887][ T3335] hsr_slave_0: entered promiscuous mode [ 777.483341][ T3335] hsr_slave_1: entered promiscuous mode [ 778.291294][ T3334] hsr_slave_0: entered promiscuous mode [ 778.346848][ T3334] hsr_slave_1: entered promiscuous mode [ 778.377124][ T3334] debugfs: 'hsr0' already exists in 'hsr' [ 778.381432][ T3334] Cannot create hsr debugfs directory [ 784.638483][ T25] audit: type=1400 audit(783.820:81): avc: denied { create } for pid=3335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.708471][ T25] audit: type=1400 audit(783.850:82): avc: denied { write } for pid=3335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.759939][ T25] audit: type=1400 audit(783.950:83): avc: denied { read } for pid=3335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.891994][ T3335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 785.219541][ T3335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 785.491672][ T3335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 785.927604][ T3335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.599533][ T3334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.882980][ T3334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 788.051748][ T3334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 788.242972][ T3334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 805.412756][ T3335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.941924][ T3334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.799986][ T3335] veth0_vlan: entered promiscuous mode [ 865.271578][ T3335] veth1_vlan: entered promiscuous mode [ 867.383072][ T3335] veth0_macvtap: entered promiscuous mode [ 868.050110][ T3335] veth1_macvtap: entered promiscuous mode [ 868.349956][ T3334] veth0_vlan: entered promiscuous mode [ 869.059821][ T3334] veth1_vlan: entered promiscuous mode [ 870.657896][ T3379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.807490][ T3379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.850859][ T3221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.857086][ T3221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.477676][ T3334] veth0_macvtap: entered promiscuous mode [ 873.326804][ T3334] veth1_macvtap: entered promiscuous mode [ 873.617170][ T25] audit: type=1400 audit(872.790:84): avc: denied { mount } for pid=3335 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 873.820982][ T25] audit: type=1400 audit(873.010:85): avc: denied { mounton } for pid=3335 comm="syz-executor" path="/syzkaller.PpySRY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 873.963881][ T25] audit: type=1400 audit(873.150:86): avc: denied { mount } for pid=3335 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 874.249495][ T25] audit: type=1400 audit(873.410:87): avc: denied { mounton } for pid=3335 comm="syz-executor" path="/syzkaller.PpySRY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 874.367876][ T25] audit: type=1400 audit(873.530:88): avc: denied { mounton } for pid=3335 comm="syz-executor" path="/syzkaller.PpySRY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 875.147491][ T25] audit: type=1400 audit(874.330:89): avc: denied { unmount } for pid=3335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 875.436238][ T25] audit: type=1400 audit(874.570:90): avc: denied { mounton } for pid=3335 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 875.517106][ T25] audit: type=1400 audit(874.700:91): avc: denied { mount } for pid=3335 comm="syz-executor" name="/" dev="gadgetfs" ino=3779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 875.662137][ T3379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.690389][ T3379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.697559][ T3379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.708382][ T3379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.903239][ T25] audit: type=1400 audit(875.090:92): avc: denied { mount } for pid=3335 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 876.013429][ T25] audit: type=1400 audit(875.190:93): avc: denied { mounton } for pid=3335 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 877.918398][ T3335] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 879.155816][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 879.162011][ T25] audit: type=1400 audit(878.330:95): avc: denied { read write } for pid=3335 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.235267][ T25] audit: type=1400 audit(878.370:96): avc: denied { open } for pid=3335 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 879.242411][ T25] audit: type=1400 audit(878.420:97): avc: denied { ioctl } for pid=3335 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 892.185416][ T25] audit: type=1400 audit(891.340:98): avc: denied { read } for pid=3491 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 892.276141][ T25] audit: type=1400 audit(891.460:99): avc: denied { open } for pid=3491 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 892.342528][ T25] audit: type=1400 audit(891.530:100): avc: denied { ioctl } for pid=3491 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 893.719011][ T25] audit: type=1400 audit(892.900:101): avc: denied { write } for pid=3491 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 895.835426][ T25] audit: type=1400 audit(895.010:102): avc: denied { execute } for pid=3493 comm="syz.0.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 915.332528][ T25] audit: type=1400 audit(914.520:103): avc: denied { append } for pid=3513 comm="syz.1.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 921.573052][ T3514] kvm [3514]: Failed to find VMA for hva 0x21016000 [ 937.875872][ T3524] kvm [3524]: Failed to find VMA for hva 0x20bd6000 [ 1413.649909][ T25] audit: type=1400 audit(1412.830:104): avc: denied { ioctl } for pid=3818 comm="syz.1.104" path="net:[4026532624]" dev="nsfs" ino=4026532624 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1420.011050][ T25] audit: type=1400 audit(1419.150:105): avc: denied { map } for pid=3822 comm="syz.1.105" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1517.596501][ T25] audit: type=1400 audit(1516.780:106): avc: denied { setattr } for pid=3875 comm="syz.0.123" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1655.160972][ T25] audit: type=1400 audit(1654.330:107): avc: denied { map } for pid=3956 comm="syz.0.149" path="pipe:[2785]" dev="pipefs" ino=2785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1957.243084][ T25] audit: type=1400 audit(1956.400:108): avc: denied { create } for pid=4144 comm="syz.1.208" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1957.413536][ T25] audit: type=1400 audit(1956.600:109): avc: denied { map } for pid=4144 comm="syz.1.208" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=13367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1957.503672][ T25] audit: type=1400 audit(1956.690:110): avc: denied { read } for pid=4144 comm="syz.1.208" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=13367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2194.869504][ T4274] kvm [4274]: Failed to find VMA for hva 0x21016000 [ 2255.571516][ T3380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.202429][ T3380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.280091][ T3380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.531831][ T3380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.236863][ T3380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.707378][ T3380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.987979][ T3380] bond0 (unregistering): Released all slaves [ 2284.625601][ T3380] hsr_slave_0: left promiscuous mode [ 2284.909512][ T3380] hsr_slave_1: left promiscuous mode [ 2286.065720][ T3380] veth1_macvtap: left promiscuous mode [ 2286.069334][ T3380] veth0_macvtap: left promiscuous mode [ 2286.100116][ T3380] veth1_vlan: left promiscuous mode [ 2286.168293][ T3380] veth0_vlan: left promiscuous mode [ 2368.996911][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2369.312900][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2402.182835][ T4291] hsr_slave_0: entered promiscuous mode [ 2402.318296][ T4291] hsr_slave_1: entered promiscuous mode [ 2423.792495][ T4291] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2424.256464][ T4291] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2424.939158][ T4291] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2425.392293][ T4291] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2452.960294][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2569.857702][ T4291] veth0_vlan: entered promiscuous mode [ 2571.213256][ T4291] veth1_vlan: entered promiscuous mode [ 2575.356976][ T4291] veth0_macvtap: entered promiscuous mode [ 2576.219464][ T4291] veth1_macvtap: entered promiscuous mode [ 2580.377370][ T4315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.573097][ T4317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.698211][ T4317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.706571][ T4317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2957.176423][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2959.126860][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2961.030234][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2963.097036][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2976.901026][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2977.076746][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2977.202897][ T12] bond0 (unregistering): Released all slaves [ 2978.858591][ T12] hsr_slave_0: left promiscuous mode [ 2979.087367][ T12] hsr_slave_1: left promiscuous mode [ 2979.752073][ T12] veth1_macvtap: left promiscuous mode [ 2979.761433][ T12] veth0_macvtap: left promiscuous mode [ 2979.777689][ T12] veth1_vlan: left promiscuous mode [ 2979.791121][ T12] veth0_vlan: left promiscuous mode [ 3001.269892][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3001.800429][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3006.248140][ T4707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.902807][ T4707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3009.172008][ T4707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.940918][ T4707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.278957][ T4683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3018.241530][ T4683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3032.282270][ T4707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3032.391776][ T4707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3032.452312][ T4707] bond0 (unregistering): Released all slaves [ 3033.738273][ T4707] hsr_slave_0: left promiscuous mode [ 3033.869194][ T4707] hsr_slave_1: left promiscuous mode [ 3034.435549][ T4707] veth1_macvtap: left promiscuous mode [ 3034.439129][ T4707] veth0_macvtap: left promiscuous mode [ 3034.457910][ T4707] veth1_vlan: left promiscuous mode [ 3034.482327][ T4707] veth0_vlan: left promiscuous mode [ 3053.441095][ T4678] hsr_slave_0: entered promiscuous mode [ 3053.595453][ T4678] hsr_slave_1: entered promiscuous mode [ 3067.871784][ T4683] hsr_slave_0: entered promiscuous mode [ 3068.040321][ T4683] hsr_slave_1: entered promiscuous mode [ 3068.189070][ T4683] debugfs: 'hsr0' already exists in 'hsr' [ 3068.206029][ T4683] Cannot create hsr debugfs directory [ 3075.335348][ T4678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3076.279221][ T4678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3076.927267][ T4678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3077.623191][ T4678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3086.102713][ T4683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3086.572047][ T4683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3087.057948][ T4683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3087.387460][ T4683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3104.872100][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3113.119007][ T4683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3213.837091][ T4678] veth0_vlan: entered promiscuous mode [ 3214.613230][ T4678] veth1_vlan: entered promiscuous mode [ 3218.037256][ T4678] veth0_macvtap: entered promiscuous mode [ 3218.608859][ T4678] veth1_macvtap: entered promiscuous mode [ 3222.846139][ T4709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3222.971228][ T4709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3222.980662][ T3789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3222.986383][ T3789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3250.696029][ T4683] veth0_vlan: entered promiscuous mode [ 3252.436694][ T4683] veth1_vlan: entered promiscuous mode [ 3256.837475][ T4683] veth0_macvtap: entered promiscuous mode [ 3257.809156][ T4683] veth1_macvtap: entered promiscuous mode [ 3262.610751][ T4697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3262.686535][ T4315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3262.698737][ T4315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3262.699586][ T4315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3366.070256][ T4697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.540055][ T4697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3370.799785][ T4697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3373.136394][ T4697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3404.576097][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3404.991564][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3405.261215][ T4697] bond0 (unregistering): Released all slaves [ 3407.818832][ T4697] hsr_slave_0: left promiscuous mode [ 3408.110380][ T4697] hsr_slave_1: left promiscuous mode [ 3409.229049][ T4697] veth1_macvtap: left promiscuous mode [ 3409.242403][ T4697] veth0_macvtap: left promiscuous mode [ 3409.266178][ T4697] veth1_vlan: left promiscuous mode [ 3409.282781][ T4697] veth0_vlan: left promiscuous mode [ 3447.239511][ T4697] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3448.898145][ T4697] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3450.101171][ T4697] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.181770][ T4697] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3472.422955][ T4697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3472.637424][ T4697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3472.829684][ T4697] bond0 (unregistering): Released all slaves [ 3475.976614][ T4697] hsr_slave_0: left promiscuous mode [ 3476.152969][ T4697] hsr_slave_1: left promiscuous mode [ 3477.026280][ T4697] veth1_macvtap: left promiscuous mode [ 3477.029860][ T4697] veth0_macvtap: left promiscuous mode [ 3477.047477][ T4697] veth1_vlan: left promiscuous mode [ 3477.072231][ T4697] veth0_vlan: left promiscuous mode [ 3524.002310][ T4937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3524.337338][ T4937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3531.743390][ T4946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3532.139797][ T4946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3557.638341][ T4937] hsr_slave_0: entered promiscuous mode [ 3557.752286][ T4937] hsr_slave_1: entered promiscuous mode [ 3568.489362][ T4946] hsr_slave_0: entered promiscuous mode [ 3568.546905][ T4946] hsr_slave_1: entered promiscuous mode [ 3568.592472][ T4946] debugfs: 'hsr0' already exists in 'hsr' [ 3568.605343][ T4946] Cannot create hsr debugfs directory [ 3582.637033][ T4937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3583.358852][ T4937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3584.321097][ T4937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3584.970196][ T4937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3591.173189][ T4946] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3591.651543][ T4946] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3592.227513][ T4946] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3592.748945][ T4946] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3623.883374][ T4937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3631.266898][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3787.250408][ T4937] veth0_vlan: entered promiscuous mode [ 3789.737044][ T4937] veth1_vlan: entered promiscuous mode [ 3791.922230][ T4946] veth0_vlan: entered promiscuous mode [ 3794.491140][ T4946] veth1_vlan: entered promiscuous mode [ 3797.394606][ T4937] veth0_macvtap: entered promiscuous mode [ 3798.691064][ T4937] veth1_macvtap: entered promiscuous mode [ 3802.487907][ T4946] veth0_macvtap: entered promiscuous mode [ 3804.074859][ T4946] veth1_macvtap: entered promiscuous mode [ 3806.662807][ T4705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3806.687252][ T4705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3806.715734][ T4705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3806.735445][ T4705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3812.560154][ T4705] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3812.637008][ T5090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3812.817122][ T5090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3812.842973][ T5090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4171.812089][ T25] audit: type=1400 audit(4170.880:111): avc: denied { execute } for pid=5357 comm="syz.6.359" path="pipe:[21551]" dev="pipefs" ino=21551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 4482.600467][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4483.279837][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4504.442448][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4504.982974][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4543.041367][ T5441] hsr_slave_0: entered promiscuous mode [ 4543.223139][ T5441] hsr_slave_1: entered promiscuous mode [ 4543.416073][ T5441] debugfs: 'hsr0' already exists in 'hsr' [ 4543.455274][ T5441] Cannot create hsr debugfs directory [ 4568.870659][ T5450] hsr_slave_0: entered promiscuous mode [ 4569.000864][ T5450] hsr_slave_1: entered promiscuous mode [ 4569.178590][ T5450] debugfs: 'hsr0' already exists in 'hsr' [ 4569.185187][ T5450] Cannot create hsr debugfs directory [ 4592.637460][ T5441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4596.446721][ T5441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4597.187933][ T5441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4599.190953][ T5441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4617.422972][ T5450] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4618.409261][ T5450] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4619.082712][ T5450] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4620.195214][ T5450] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4662.901128][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4679.930363][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4784.651942][ T27] INFO: task syz.6.373:5429 blocked for more than 430 seconds. [ 4784.707316][ T27] Not tainted syzkaller #0 [ 4784.752535][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4784.753263][ T27] task:syz.6.373 state:D stack:0 pid:5429 tgid:5429 ppid:4946 task_flags:0x400040 flags:0x00000011 [ 4784.822209][ T27] Call trace: [ 4784.822855][ T27] __switch_to+0x584/0xb00 (T) [ 4784.906132][ T27] __schedule+0x200c/0x3428 [ 4784.946230][ T27] schedule+0xac/0x27c [ 4784.946970][ T27] schedule_timeout+0x68/0x1ec [ 4784.947497][ T27] do_wait_for_common+0x28c/0x440 [ 4784.948028][ T27] wait_for_completion+0x44/0x5c [ 4784.948499][ T27] __synchronize_srcu+0x2a4/0x320 [ 4784.949053][ T27] synchronize_srcu+0x3d0/0x4f8 [ 4784.950025][ T27] mmu_notifier_unregister+0x320/0x428 [ 4784.950573][ T27] kvm_put_kvm+0x698/0xbe0 [ 4784.951022][ T27] kvm_vm_release+0x58/0x78 [ 4784.951483][ T27] __fput+0x4ac/0x978 [ 4784.951971][ T27] ____fput+0x20/0x58 [ 4784.952415][ T27] task_work_run+0x1b8/0x250 [ 4784.952901][ T27] exit_to_user_mode_loop+0x110/0x188 [ 4784.953380][ T27] el0_svc+0x17c/0x238 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4785.115552][ T27] el0t_64_sync_handler+0x84/0x12c [ 4785.146234][ T27] el0t_64_sync+0x198/0x19c [ 4785.148255][ T27] [ 4785.148255][ T27] Showing all locks held in the system: [ 4785.148807][ T27] 2 locks held by kworker/u4:0/12: [ 4785.149249][ T27] #0: 53f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10 [ 4785.152394][ T27] #1: ffff80008c817c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10 [ 4785.347478][ T27] 1 lock held by khungtaskd/27: [ 4785.375555][ T27] #0: ffff800087a86d08 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 4785.377785][ T27] 2 locks held by getty/3198: [ 4785.378171][ T27] #0: 8cf000001242a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4785.379999][ T27] #1: 22ff80008c80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234 [ 4785.381805][ T27] 2 locks held by syz-executor/3327: [ 4785.382158][ T27] 3 locks held by kworker/u4:6/3380: [ 4785.382470][ T27] 2 locks held by kworker/u4:8/3455: [ 4785.383251][ T27] #0: 53f000000cc26948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a10 [ 4785.578741][ T27] #1: ffff8000a3df7c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a10 [ 4785.580521][ T27] 3 locks held by kworker/u4:5/4315: [ 4785.580900][ T27] 2 locks held by kworker/u4:9/4317: [ 4785.581227][ T27] 3 locks held by kworker/u4:7/4705: [ 4785.581526][ T27] 3 locks held by kworker/u4:10/4707: [ 4785.581864][ T27] 3 locks held by kworker/u4:13/4950: [ 4785.582221][ T27] 3 locks held by kworker/u4:14/5090: [ 4785.582560][ T27] 2 locks held by syz.5.372/5420: [ 4785.583428][ T27] 3 locks held by kworker/u4:11/5525: [ 4785.665052][ T27] 3 locks held by kworker/u4:15/5577: [ 4785.668275][ T27] 1 lock held by modprobe/5621: [ 4785.709985][ T27] [ 4785.710427][ T27] ============================================= [ 4785.710427][ T27] [ 4785.711375][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 4785.717170][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 4785.718653][ T27] Hardware name: linux,dummy-virt (DT) [ 4785.719446][ T27] Call trace: [ 4785.720303][ T27] show_stack+0x2c/0x3c (C) [ 4785.721460][ T27] __dump_stack+0x30/0x40 [ 4785.722527][ T27] dump_stack_lvl+0x30/0x12c [ 4785.723522][ T27] dump_stack+0x1c/0x28 [ 4785.724494][ T27] vpanic+0x1d4/0x4e4 [ 4785.725408][ T27] vpanic+0x0/0x4e4 [ 4785.726304][ T27] hung_task_panic+0x0/0x2c [ 4785.727419][ T27] kthread+0x794/0x99c [ 4785.728490][ T27] ret_from_fork+0x10/0x20 [ 4785.730455][ T27] Kernel Offset: disabled [ 4785.731278][ T27] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f [ 4785.732445][ T27] Memory Limit: none [ 4785.734771][ T27] Rebooting in 86400 seconds..