last executing test programs: 49m51.579280886s ago: executing program 1 (id=42): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000500)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4}) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@svc={0x122, 0x40, {0x100, [0x1, 0x3, 0x4, 0x1, 0xa]}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0xf, 0x6, 0x8, 0x2}}, @smc={0x1e, 0x40, {0x84000050, [0xeb, 0x2300000, 0x3ff0000000, 0xfffffffffffffff6, 0x1000]}}, @code={0xa, 0x84, {"c01387d200e0b8f2010080d2220080d2e30180d2a40080d2020000d4007008d500778bd20000b8f2610180d2220080d2a30080d2a40180d2020000d4e00320aac0d699d20080b0f2810180d2a20180d2430180d2240180d2020000d40020005e007008d5000028d5008008d500000078"}}, @smc={0x1e, 0x40, {0x100, [0x2, 0x8000, 0x100000000, 0x1a, 0x7]}}, @svc={0x122, 0x40, {0x84000011, [0xdf, 0x1, 0x6, 0x3]}}, @svc={0x122, 0x40, {0x4, [0x40, 0x2800000000, 0x4, 0x5, 0x200]}}, @smc={0x1e, 0x40, {0xc5000021, [0x7, 0x80000000, 0x5, 0x2, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0x1, 0x2, 0x80, 0x3}}, @irq_setup={0x46, 0x18, {0x3, 0x133}}, @uexit={0x0, 0x18, 0x93}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x9, 0x6, 0x6, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013e703}}, @mrs={0xbe, 0x18, {0x603000000013e6c8}}, @svc={0x122, 0x40, {0x80000000, [0x9, 0xf374, 0x3, 0x4, 0x126]}}, @svc={0x122, 0x40, {0x84000004, [0x5, 0x2403, 0x8000000000000001, 0x4, 0x7f]}}, @mrs={0xbe, 0x18, {0x3ff9e51943bfbeff}}, @uexit={0x0, 0x18, 0x5}], 0x38c}, &(0x7f0000000080)=[@featur2={0x1, 0x20}], 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bc2000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0x18) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r12, 0xae80, 0x0) openat$kvm(0x0, 0x0, 0xc0002, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0xe6) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10}) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r4, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49m36.279701947s ago: executing program 1 (id=45): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r0, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r0, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x200281, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, 0xffffffffffffffff) (async) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, 0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000001c0)=@arm64_sys={0x603000000013c01c, 0x0}) 49m28.580072728s ago: executing program 1 (id=47): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000c6a000/0x3000)=nil, 0x930, 0x1000003, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x8, &(0x7f00000000c0)=0x45d4970}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r2, 0xffffffffffbffffc, 0x120) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x4, &(0x7f00000004c0)=0x1}) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@its_setup={0x82, 0x28, {0x3, 0x0, 0x16f}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x8, 0x8, 0x100}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x4, 0x220) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x3}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x29f}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) 49m20.472430056s ago: executing program 1 (id=49): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f00004d2000/0x3000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f00000e7000/0x2000)=nil, r4, 0x0, 0x80010, r5, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) (async) close(r1) 49m16.891206256s ago: executing program 0 (id=50): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013c801, &(0x7f0000000240)=0x7ffffffffffc}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x8, 0x7e, 0x5, 0x0, 0x3, 0x5, 0xe, 0x54, 0x9, 0x7, 0x5, 0xd, 0x0, 0x132, 0x7ff, 0x6, 0x2, 0xe, 0xb, '\x00', 0x1, 0x6}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = eventfd2(0x7, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x2, r6, 0x8}) 49m13.509676605s ago: executing program 1 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x5, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}], 0x75}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x40000000000004, 0xc0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 49m9.774431175s ago: executing program 0 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_vgic_v3_setup(r1, 0x0, 0x0) close(0x4) close(0x5) (async) close(0x5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r12, 0x0) (async) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000180)="f30138dd033be3ac4a44a256bf00e2004b584bd92e00000f00000000000100010000020000000003f4ff000000235acbd98700000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305829, &(0x7f0000000040)=@attr_other={0x0, 0x6, 0x8000008, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) r14 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0}) ioctl$KVM_CREATE_VM(r14, 0x401c5820, 0x20000001) (async) ioctl$KVM_CREATE_VM(r14, 0x401c5820, 0x20000001) 49m4.850908174s ago: executing program 1 (id=53): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a67000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000040)=@arm64_core={0x603000000010001c, &(0x7f0000000000)=0x9}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100032, &(0x7f00000002c0)=0x40}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000300)=0x137}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000023) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xfffff000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) openat$kvm(0x0, &(0x7f0000000140), 0x2d8903, 0x0) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2e) openat$kvm(0x0, 0x0, 0x0, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x2, 0x100) 48m23.450329113s ago: executing program 32 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_vgic_v3_setup(r1, 0x0, 0x0) close(0x4) close(0x5) (async) close(0x5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r12, 0x0) (async) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000180)="f30138dd033be3ac4a44a256bf00e2004b584bd92e00000f00000000000100010000020000000003f4ff000000235acbd98700000000000200", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x40305829, &(0x7f0000000040)=@attr_other={0x0, 0x6, 0x8000008, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) (async) r14 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0}) ioctl$KVM_CREATE_VM(r14, 0x401c5820, 0x20000001) (async) ioctl$KVM_CREATE_VM(r14, 0x401c5820, 0x20000001) 48m17.51035331s ago: executing program 33 (id=53): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a67000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000040)=@arm64_core={0x603000000010001c, &(0x7f0000000000)=0x9}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100032, &(0x7f00000002c0)=0x40}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000300)=0x137}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000023) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xfffff000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) openat$kvm(0x0, &(0x7f0000000140), 0x2d8903, 0x0) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2e) openat$kvm(0x0, 0x0, 0x0, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x2, 0x100) 41m16.212015811s ago: executing program 3 (id=74): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r3 = eventfd2(0x8801, 0x800) (async) r4 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x5, 0x2, r4}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x5, 0x2, r4}) (async) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000fd7000/0x10000)=nil, 0x10000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x541b, 0xac) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) 41m4.949036244s ago: executing program 2 (id=76): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x1}) 41m3.817221096s ago: executing program 3 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8}) (async) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000200)={0xdddd1000, 0x0, 0xfffffffc, 0x1, 0x7}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x82001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r6, 0x0) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xd, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x89, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x3, 0x29, 0x0, '\x00', 0x10, 0x6}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1a) (async, rerun: 64) r9 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f00000000c0)=0x1}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r10, &(0x7f00000001c0), 0xe80) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x400001, 0x1}}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x95d581, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000bfd000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000051, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x57fd, 0x2}}) (async, rerun: 32) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x5, 0x0, 0x7}}]}) (rerun: 32) 40m55.129206243s ago: executing program 2 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160002, &(0x7f00000000c0)=0x2}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80600, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x3, 0x10, 0x8, 0x8, 0x2}}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xd4}, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r10, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r11, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000e3d000/0x1000)=nil, r12, 0x3000002, 0x80010, r5, 0x0) 40m51.990820699s ago: executing program 3 (id=79): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x1}) (async) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010003e, &(0x7f0000000000)=0x9}) (async) ioctl$KVM_SET_REGS(r3, 0x4360ae82, &(0x7f0000000080)={[0x7, 0x8, 0x7b8d, 0x7, 0x4, 0x9, 0x3, 0x40, 0x7, 0x6, 0x1, 0xffffffff00000000, 0x100, 0x2, 0x8, 0x1], 0x0, 0x1a10}) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x25) 40m38.400108091s ago: executing program 3 (id=80): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x3ee}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r12 = ioctl$KVM_CREATE_VM(r11, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0x8004b706, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0x6}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40m36.259934066s ago: executing program 2 (id=81): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000080)=@arm64_core={0x6030000000100046, &(0x7f0000000100)=0x7fffffff}) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0xfffffffffffffbff}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) 40m15.552014652s ago: executing program 3 (id=82): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000002000000000000000002080d2a0bbbbf21f004299"], 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 40m15.164464084s ago: executing program 2 (id=83): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000000)=0x78}) 40m4.747125827s ago: executing program 2 (id=84): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x110400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x20c) 40m2.729101794s ago: executing program 3 (id=85): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1ff}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x4b47, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close(r0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8}) r10 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0x9}) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xffff, [0x7, 0x4, 0x4, 0x2, 0x8001]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x10000, 0x0, 0x100, 0x2}}], 0x68}, 0x0, 0x0) 39m56.504013511s ago: executing program 2 (id=86): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x169880, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x5450, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r8 = eventfd2(0x5, 0x800) write$eventfd(r8, &(0x7f0000000000)=0xffffffffffffffff, 0x8) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2e) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x17}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bc5000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@hvc={0x32, 0x40, {0x84000004, [0x587, 0x7fffffff, 0x4, 0x80, 0xfff]}}, @smc={0x1e, 0x40, {0x31000000, [0x7, 0x0, 0x95, 0x8000000000000001, 0x80000000]}}], 0x80}, &(0x7f0000000300)=[@featur1={0x1, 0x22}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r15, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39m16.349757072s ago: executing program 34 (id=85): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000040)={0x1fd, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1ff}) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x4b47, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close(r0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8}) r10 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0x9}) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r16, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0xffff, [0x7, 0x4, 0x4, 0x2, 0x8001]}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x3, 0x10000, 0x0, 0x100, 0x2}}], 0x68}, 0x0, 0x0) 39m6.607095294s ago: executing program 35 (id=86): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x169880, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0x5450, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur2={0x1, 0x12}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r8 = eventfd2(0x5, 0x800) write$eventfd(r8, &(0x7f0000000000)=0xffffffffffffffff, 0x8) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2e) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x17}) r12 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000bc5000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@hvc={0x32, 0x40, {0x84000004, [0x587, 0x7fffffff, 0x4, 0x80, 0xfff]}}, @smc={0x1e, 0x40, {0x31000000, [0x7, 0x0, 0x95, 0x8000000000000001, 0x80000000]}}], 0x80}, &(0x7f0000000300)=[@featur1={0x1, 0x22}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r15, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@smc={0x1e, 0x40, {0x8400000e, [0x99b, 0x100000003, 0x5, 0x101, 0x10]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32m57.772963963s ago: executing program 5 (id=88): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) r7 = eventfd2(0x4, 0x80801) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7, 0x6, 0x2, r6}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r8 = eventfd2(0xd, 0x1) close(r8) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) r13 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r14 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r15, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, r16, 0x3}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0xf0780000002e2172, 0x0}) ioctl$KVM_CREATE_VM(r13, 0x401c5820, 0x20000001) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r8, 0x0, 0x500) 32m39.289566644s ago: executing program 5 (id=90): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0xfffffffffffffff9, 0x0}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffa9}, &(0x7f0000000100)=[@featur2={0x1, 0x8}], 0xf1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 31m52.709781697s ago: executing program 36 (id=90): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0xfffffffffffffff9, 0x0}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffa9}, &(0x7f0000000100)=[@featur2={0x1, 0x8}], 0xf1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 24m55.501644042s ago: executing program 4 (id=120): r0 = eventfd2(0x8000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000380)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp={0x6040000004100099, &(0x7f0000000240)=0x5}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xd7) r7 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000087000/0x400000)=nil) ioctl$KVM_GET_DEVICE_ATTR_vm(r7, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x101, 0x2}}) write$eventfd(r6, &(0x7f00000001c0), 0xfdef) eventfd2(0x8000, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x0, r0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x25) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000380)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp={0x6040000004100099, &(0x7f0000000240)=0x5}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xd7) (async) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000087000/0x400000)=nil) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(r7, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x101, 0x2}}) (async) write$eventfd(r6, &(0x7f00000001c0), 0xfdef) (async) 24m39.674105259s ago: executing program 4 (id=121): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x230080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x7f) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f00000000c0)=@attr_pmu_init) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0x84, &(0x7f0000000080)=0xfffffffffffffff7}) 24m22.869219049s ago: executing program 4 (id=122): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000900)=[@msr={0x14, 0x20, {0x603000000013e601, 0xfffffffffffffffe}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0x1, 0x7, 0x81, 0x2}}, @eret={0xe6, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x1da}}, @uexit={0x0, 0x18, 0x400}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x3, 0x0, 0x80, 0x5, 0x2}}, @msr={0x14, 0x20, {0x603000000013e10a, 0x2}}, @msr={0x14, 0x20, {0x603000000013c601, 0x9}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x1f}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x24e}}, @eret={0xe6, 0x18, 0x107}, @eret={0xe6, 0x18, 0xf0e}, @eret={0xe6, 0x18, 0x7bd3d4d2}, @uexit={0x0, 0x18, 0x5}, @irq_setup={0x46, 0x18, {0x3, 0x1e9}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xa0, 0x9, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x200, 0x9, 0x5}}, @irq_setup={0x46, 0x18, {0x1, 0x81}}, @msr={0x14, 0x20, {0x603000000013df77, 0x4}}, @memwrite={0x6e, 0x30, @generic={0x2a283000, 0x925, 0x0, 0xc}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x0, 0xf, 0x1ff, 0x7, 0x2}}, @eret={0xe6, 0x18}, @code={0xa, 0x54, {"000028d5000028d5000028d5000820b840e597d20020b0f2610180d2c20180d2e30080d2240080d2020000d4000008d50004407c0070df0c0000005a0000007c"}}, @msr={0x14, 0x20, {0x603000000013c801, 0xfffffffffffff946}}, @msr={0x14, 0x20, {0x603000000013c019, 0x5}}, @memwrite={0x6e, 0x30, @generic={0x50000, 0x27d, 0xffffffffffffff09, 0x9}}, @svc={0x122, 0x40, {0x4000000, [0x11888fd0, 0x0, 0x4, 0x7, 0x3]}}, @code={0xa, 0x9c, {"40d68fd20040b8f2a10080d2220180d2030080d2e40080d2020000d420f889d200e0b8f2e10080d2020080d2e30080d2440080d2020000d40044205e000008d5007008d500004069004284d20040b0f2c10080d2220080d2030080d2440080d2020000d40048214e0000001200e29fd20040b8f2210080d2820080d2430180d2840080d2020000d4"}}, @uexit={0x0, 0x18, 0xfffffffffffffffd}, @code={0xa, 0x84, {"40ec87d20020b0f2810180d2c20180d2e30180d2640180d2020000d4000028d5007008d5000028d5a0b19bd20040b8f2a10080d2e20180d2630080d2640080d2020000d40084000d008008d580cf9cd20020b8f2610080d2e20080d2e30180d2440080d2020000d4000820fc007008d5"}}], 0x514}], 0x1, 0x0, &(0x7f00000000c0)=[@featur2={0x1, 0x8}], 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000a77000/0x400000)=nil) syz_kvm_setup_cpu$arm64(r4, 0xffffffffffffffff, &(0x7f0000a1c000/0x400000)=nil, &(0x7f00000003c0)=[{0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x398}], 0x1, 0x0, &(0x7f0000000400)=[@featur1={0x1, 0xd1}], 0x1) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 23m59.939003541s ago: executing program 4 (id=123): mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x280880, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x9, 0x1, &(0x7f0000000040)=0xab}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000f90000/0x4000)=nil, r13, 0x8, 0x2010, r3, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000040)=@arm64_sys={0x603000000013df7c, &(0x7f0000000000)=0x6}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x1b3, 0x3, 0x2}) 23m44.460020169s ago: executing program 4 (id=124): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x240) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_REGS(r12, 0x8360ae81, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0xe0000, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r17, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r16, 0xc008ae67, &(0x7f0000000080)={0x5, 0x2}) r18 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r16, 0x4040ae79, &(0x7f0000001340)={0x7fffffffffffffff, 0x0, 0x2, r18, 0x3}) ioctl$KVM_IOEVENTFD(r14, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, r18, 0xb}) r19 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013df61}}], 0x18}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r19, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) 23m40.391281555s ago: executing program 6 (id=92): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x408d00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x0, 0xfffffffe, 0x10000, 0x0, 0x4, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m28.282549544s ago: executing program 6 (id=125): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0x8000000, 0x1000, &(0x7f0000c42000/0x1000)=nil}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000f34000/0x2000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffd5}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000001c0)=@arm64_ccsidr={0x602000000011000e, 0x0}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, 0x0) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x200000a, 0x10, r8, 0x0) 23m20.229748388s ago: executing program 4 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_kvm_vgic_v3_setup(r3, 0x1, 0x180) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) close(0x4) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x800}}]}) close(r7) (async) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7}) (async) ioctl$KVM_CREATE_VM(r0, 0x2, 0x7) 22m40.680378185s ago: executing program 37 (id=125): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0x8000000, 0x1000, &(0x7f0000c42000/0x1000)=nil}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000f34000/0x2000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffd5}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000001c0)=@arm64_ccsidr={0x602000000011000e, 0x0}) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, 0x0) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x200000a, 0x10, r8, 0x0) 22m29.687789991s ago: executing program 38 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_kvm_vgic_v3_setup(r3, 0x1, 0x180) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f00000002c0)=[@hvc={0x32, 0x40, {0x84000003, [0xa00000000, 0x4, 0x4, 0x9, 0x4d]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) close(0x4) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xc, 0x2, 0x1, 0x0, @msi={0xebb, 0x394c794c, 0x7f, 0x800}}]}) close(r7) (async) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7}) (async) ioctl$KVM_CREATE_VM(r0, 0x2, 0x7) 13m43.080345511s ago: executing program 8 (id=128): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x31d002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000001) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async) r3 = eventfd2(0x8801, 0x800) (async) r4 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x5, 0x2, r4}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x1, 0x2, r4}) (async) close(0x5) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async, rerun: 32) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async, rerun: 32) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async, rerun: 64) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async, rerun: 64) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async, rerun: 32) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async, rerun: 32) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x8, 0x100010, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 13m36.419165472s ago: executing program 7 (id=127): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x179}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x3550, 0x3}}], 0x58}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13m27.194269881s ago: executing program 8 (id=129): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010000a, &(0x7f0000000100)=0x10000000c5c9}) 13m17.95778105s ago: executing program 7 (id=130): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x638840, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xc, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x7, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x3, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x88, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xdddd1000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x7000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xfec00000, [0x6800000000000000, 0x4, 0x3, 0x8]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x4, 0x4d) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000100)={0x1001ffd, 0x1}) 13m9.54928238s ago: executing program 8 (id=131): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x3, 0x2, 0x9}}], 0x50}, 0x0, 0x0) (async) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x3, 0x2, 0x9}}], 0x50}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_vgic_v3_setup(r0, 0x1, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df61, &(0x7f00000001c0)=0x20000000004}) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x43ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000cb2000/0x4000)=nil, 0x0, 0x2000003, 0x12, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000cb2000/0x4000)=nil, 0x0, 0x2000003, 0x12, r2, 0x0) ioctl$KVM_CREATE_VM(r7, 0x80111500, 0x20000000) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x300, 0x7}) 13m0.09716305s ago: executing program 7 (id=132): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@irq_setup={0x46, 0x18, {0x4, 0x17f}}], 0x18}, &(0x7f0000000080)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) (async) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000140)=@arm64_ccsidr={0x6020000000110001, &(0x7f0000000100)=0x4}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5) (async) ioctl$KVM_GET_SREGS(r0, 0x8000ae83, &(0x7f00000001c0)) (async) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000300)={0xee, "6af91ff10d7e84792af8d680ad6fe3d71f5268e2c74f39d02dd6ac87b099d4af9a76fd1d455056d0ed44786e7e57ea7935937eb5a854a778c91cb03c59a12869dde7ac4afedb43ad3c871218c4d443d41232f0ae3ab12a8011d755192d2e0baaf9b69cbadbfe3e19c08ddd707ef0cf12ae8fe4613fd8d4a8249e234ea70fe8d6c6973d40f4e189f2fe425846c51434be5769ab7163360ad23522a10a759da4c9b7e8e55d4fa4c00ab67fefaa720225b9003b481c72f98bc5ac38028b4dda3e3fecfbcadc015300a5e922865b9fd448c40db929b5f677368166e3a5e1413a816bc0a4be9677250ee29380df882154"}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x62c01, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000440)=0x3adc) (async) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000480)) (async) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f00000004c0)={0x3, 0x90}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000540)=@arm64_ccsidr={0x6020000000110004, &(0x7f0000000500)=0x637}) eventfd2(0x4, 0x80001) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000580)=@x86={0x0, 0x6, 0x7, 0x0, 0x3, 0x0, 0x3, 0x81, 0x3, 0x4, 0x7, 0x1, 0x0, 0x489558af, 0x63b8, 0xff, 0x2, 0x40, 0x9, '\x00', 0xf4, 0x401}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x488000, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000600)) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000640)={0x1fe, 0x3, 0xe000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 12m49.860992356s ago: executing program 8 (id=133): munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r3, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r1, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x3000004, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000834000/0x3000)=nil, 0x930, 0x100000a, 0x8032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) 12m45.55500985s ago: executing program 7 (id=134): mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0xc007000000000000) (async) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r4, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000e04000/0x2000)=nil, 0x930, 0x1, 0x11, r4, 0x0) (async, rerun: 32) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r5, 0x8, 0x13, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r5, 0x1000001, 0x12, r4, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r5, 0x4, 0x20010, r0, 0x0) (async, rerun: 32) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r0, 0x4068aea3, &(0x7f0000000000)) 12m28.577279646s ago: executing program 7 (id=135): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = eventfd2(0xffff10c0, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x4, r5, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x2, 0x100) close(r9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x31) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000000)=@arm64={0xb, 0x5, 0x99, '\x00', 0xfe5}) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r14, 0xc008ae67, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) 12m24.144106913s ago: executing program 8 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000004c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x240) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b00)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x10003, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 12m1.114119012s ago: executing program 8 (id=137): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000240)=@arm64_core={0x603000000010001c, &(0x7f0000000000)=0x10000}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc5000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bfd000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000051, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000160006, &(0x7f0000000000)=0x8}) r19 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r19, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r14, 0x0) 11m39.700988356s ago: executing program 39 (id=135): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = eventfd2(0xffff10c0, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0xf09, 0x8080000, 0x4, r5, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000) r7 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x2, 0x100) close(r9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x31) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000000)=@arm64={0xb, 0x5, 0x99, '\x00', 0xfe5}) r13 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r14, 0xc008ae67, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) 11m12.750518754s ago: executing program 40 (id=137): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000240)=@arm64_core={0x603000000010001c, &(0x7f0000000000)=0x10000}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc5000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x603000000013dce6}}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r8 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x2, 0x4, 0x1}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bfd000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000051, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000160006, &(0x7f0000000000)=0x8}) r19 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r14, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r19, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r14, 0x0) 2m12.82423511s ago: executing program 9 (id=138): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013808c}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m7.379542717s ago: executing program 0 (id=139): munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x4, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x4, 0xa}}], 0x30}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m56.611686318s ago: executing program 9 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0xb, 0x7, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e0000000000000030000000000000000000dddd0080"], 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m44.609765399s ago: executing program 0 (id=141): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce2, 0x7ffe}}, @smc={0x1e, 0x40, {0xc4000007, [0x8, 0x9, 0x5, 0x7fff, 0x5]}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@irq_setup={0x5, 0x18}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m18.45255929s ago: executing program 9 (id=142): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000afb000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000240)={0xffff1000, 0xa000}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000040)={0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000b, 0x20010, r4, 0x0) 1m16.960545794s ago: executing program 0 (id=143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) 57.124193113s ago: executing program 0 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x242c0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x4, 0x3a0}}, @mrs={0xbe, 0x18, {0x603000000013de90}}, @eret={0xe6, 0x18, 0xfff}, @irq_setup={0x46, 0x18, {0x0, 0x2c7}}, @svc={0x122, 0x40, {0x31000000, [0xc, 0xf2e, 0x4, 0x2, 0x9]}}, @code={0xa, 0x84, {"00a8312e60bc8ed200a0b0f2c10180d2820080d2830080d2e40180d2020000d400000033c0fd94d200e0b8f2c10080d2e20080d2e30080d2c40180d2020000d40060005e000008d560ef96d20000b8f2610080d2420180d2c30180d2240180d2020000d4000008d5007008d500f8b02e"}}, @hvc={0x32, 0x40, {0x84000011, [0x100000000, 0x1, 0x7, 0x0, 0x435]}}, @smc={0x1e, 0x40, {0x84000004, [0x0, 0xe1, 0xc3c9, 0x8f, 0x5]}}, @svc={0x122, 0x40, {0x45003fde, [0xcebf, 0x2433, 0x7, 0x6, 0x896]}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0x5de, 0x3, 0x8}}, @uexit={0x0, 0x18, 0x1}, @svc={0x122, 0x40, {0xc5000020, [0x3, 0xe9, 0x6, 0x81, 0x800]}}, @svc={0x122, 0x40, {0x10, [0x100000001, 0x7fff, 0x2, 0x6]}}], 0x2ac}, &(0x7f0000000340)=[@featur1={0x1, 0x91}], 0x1) munmap(&(0x7f0000d43000/0x3000)=nil, 0x3000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) syz_kvm_setup_cpu$arm64(r3, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000780)=[{0x0, &(0x7f0000000380)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xffd0, 0x9, 0xa}}, @irq_setup={0x46, 0x18, {0x3, 0x176}}, @msr={0x14, 0x20, {0x603000000013c642, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0x400}, @code={0xa, 0xcc, {"60aa98d20080b0f2c10180d2220180d2e30180d2c40180d2020000d400a19dd200c0b0f2a10180d2020080d2030080d2a40180d2020000d4007008d5008008d5000cc078e08095d200a0b8f2e10080d2820180d2430080d2640180d2020000d420388cd200e0b0f2210180d2c20080d2830180d2840180d2020000d400a0000de01984d20020b0f2410080d2c20080d2030080d2e40080d2020000d440099ed20020b8f2e10080d2e20180d2030180d2e40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x175}}, @code={0xa, 0x9c, {"0008285e0030204e000008d5a0088ad20060b8f2e10180d2a20180d2630080d2640080d2020000d4007008d5e0dc99d20020b8f2810180d2a20080d2230080d2240080d2020000d4809f87d20020b8f2410080d2a20080d2630080d2040080d2020000d4c08a8cd20080b8f2610080d2820180d2430180d2a40180d2020000d4007008d5000028d5"}}, @smc={0x1e, 0x40, {0xc4000053, [0x5, 0x7ff, 0x6, 0x81, 0x40]}}, @its_setup={0x82, 0x28, {0x2, 0x2}}, @svc={0x122, 0x40, {0xc4000005, [0x0, 0x75, 0x6, 0xc000000000, 0x2]}}, @irq_setup={0x46, 0x18, {0x3, 0x374}}, @hvc={0x32, 0x40, {0x0, [0xfffffffffffffffe, 0xfffffffffffffffe, 0x7dcb, 0x0, 0x9]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x22d}}, @code={0xa, 0xb4, {"000028d50080200e000008d5c08289d20080b0f2210180d2820080d2630080d2240180d2020000d4402285d200c0b8f2210180d2620080d2630080d2040180d2020000d4000840fa40c984d200e0b0f2010080d2820180d2e30080d2a40180d2020000d4802c9ad200e0b0f2a10080d2420080d2030080d2a40080d2020000d440e58bd20060b0f2a10080d2620080d2230180d2c40180d2020000d40040202e"}}], 0x3ec}], 0x1, 0x0, &(0x7f00000007c0)=[@featur1={0x1, 0xc3}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000840)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000800)=0xff}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000880)={0x2, 0x40}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000e00)={0x0, &(0x7f00000008c0)=[@eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013df71, 0x9}}, @eret={0xe6, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x1049}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x397}}, @uexit={0x0, 0x18, 0xb}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x30e}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x40, 0x3, 0x4}}, @memwrite={0x6e, 0x30, @generic={0x60000, 0x459, 0x7, 0x1}}, @code={0xa, 0x9c, {"c0049bd20020b0f2a10080d2020180d2a30080d2240180d2020000d480639ed20000b8f2210080d2e20180d2230080d2c40180d2020000d4007008d500004039000028d5003c0053000028d540b094d200a0b0f2410180d2c20080d2630180d2440080d2020000d4007008d5c0ff9ad200c0b0f2e10080d2a20180d2830080d2e40180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013df7f, 0xfffffffffffffc00}}, @memwrite={0x6e, 0x30, @generic={0xeecd0006, 0xc73, 0xa010, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x12a}}, @svc={0x122, 0x40, {0x4000000, [0xfffffffffffffffe, 0xfffffffffffffffd, 0x3, 0xd45, 0x1]}}, @irq_setup={0x46, 0x18, {0x4, 0x138}}, @its_setup={0x82, 0x28, {0x7, 0x4, 0x246}}, @memwrite={0x6e, 0x30, @generic={0x200000, 0xb2, 0x5, 0x2}}, @svc={0x122, 0x40, {0x40000000, [0x9, 0x2a7b, 0x7ff, 0x2229, 0x5c]}}, @code={0xa, 0x84, {"400296d200e0b8f2010080d2620080d2e30080d2c40180d2020000d40820201e000008d5000008d540528ed200c0b0f2010180d2820180d2c30080d2c40180d2020000d480d492d20080b8f2810180d2020080d2c30080d2a40180d2020000d40000229e004cc09a000028d50084800d"}}, @uexit={0x0, 0x18, 0x80000001}, @code={0xa, 0xb4, {"00149cd20060b8f2010180d2420180d2030180d2440180d2020000d4409384d20080b0f2010080d2020180d2230080d2040080d2020000d4e05582d20080b8f2610080d2220080d2030180d2240080d2020000d4007008d50014202e20f99ed200c0b0f2810180d2a20080d2830180d2240180d2020000d4007008d5000040adc09d8cd200c0b0f2410180d2c20180d2230080d2240180d2020000d40000009b"}}, @eret={0xe6, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x4, 0x3b3}}, @svc={0x122, 0x40, {0x8400000f, [0x80, 0x3, 0x8, 0x4, 0xa]}}, @irq_setup={0x46, 0x18, {0x1, 0x20}}, @hvc={0x32, 0x40, {0x800, [0x8001, 0x10001, 0x7, 0x2, 0x9]}}], 0x53c}, &(0x7f0000000e40)=[@featur2={0x1, 0x95}], 0x1) mmap$KVM_VCPU(&(0x7f0000fb9000/0x4000)=nil, r8, 0x0, 0x11, r9, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x38) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_S390_VCPU_FAULT(r12, 0x4008ae52, &(0x7f0000000ec0)=0x10001) ioctl$KVM_CAP_DIRTY_LOG_RING(r11, 0x4068aea3, &(0x7f0000000f00)={0xc0, 0x0, 0xe000}) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000e8b000/0x4000)=nil, r8, 0x3000008, 0x810, r7, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r12, 0xaead) r14 = syz_kvm_vgic_v3_setup(r13, 0x4, 0x440) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000fc0)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f0000000f80)=0x10}) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000001000)=0x4) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x34) 52.737396498s ago: executing program 9 (id=145): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000003, [0x664b7dee, 0x939, 0xe, 0x7f, 0x8000000000000000]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.396974228s ago: executing program 41 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x242c0, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[@irq_setup={0x46, 0x18, {0x4, 0x3a0}}, @mrs={0xbe, 0x18, {0x603000000013de90}}, @eret={0xe6, 0x18, 0xfff}, @irq_setup={0x46, 0x18, {0x0, 0x2c7}}, @svc={0x122, 0x40, {0x31000000, [0xc, 0xf2e, 0x4, 0x2, 0x9]}}, @code={0xa, 0x84, {"00a8312e60bc8ed200a0b0f2c10180d2820080d2830080d2e40180d2020000d400000033c0fd94d200e0b8f2c10080d2e20080d2e30080d2c40180d2020000d40060005e000008d560ef96d20000b8f2610080d2420180d2c30180d2240180d2020000d4000008d5007008d500f8b02e"}}, @hvc={0x32, 0x40, {0x84000011, [0x100000000, 0x1, 0x7, 0x0, 0x435]}}, @smc={0x1e, 0x40, {0x84000004, [0x0, 0xe1, 0xc3c9, 0x8f, 0x5]}}, @svc={0x122, 0x40, {0x45003fde, [0xcebf, 0x2433, 0x7, 0x6, 0x896]}}, @memwrite={0x6e, 0x30, @generic={0xffff1000, 0x5de, 0x3, 0x8}}, @uexit={0x0, 0x18, 0x1}, @svc={0x122, 0x40, {0xc5000020, [0x3, 0xe9, 0x6, 0x81, 0x800]}}, @svc={0x122, 0x40, {0x10, [0x100000001, 0x7fff, 0x2, 0x6]}}], 0x2ac}, &(0x7f0000000340)=[@featur1={0x1, 0x91}], 0x1) munmap(&(0x7f0000d43000/0x3000)=nil, 0x3000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) syz_kvm_setup_cpu$arm64(r3, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000780)=[{0x0, &(0x7f0000000380)=[@memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0xffd0, 0x9, 0xa}}, @irq_setup={0x46, 0x18, {0x3, 0x176}}, @msr={0x14, 0x20, {0x603000000013c642, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0x400}, @code={0xa, 0xcc, {"60aa98d20080b0f2c10180d2220180d2e30180d2c40180d2020000d400a19dd200c0b0f2a10180d2020080d2030080d2a40180d2020000d4007008d5008008d5000cc078e08095d200a0b8f2e10080d2820180d2430080d2640180d2020000d420388cd200e0b0f2210180d2c20080d2830180d2840180d2020000d400a0000de01984d20020b0f2410080d2c20080d2030080d2e40080d2020000d440099ed20020b8f2e10080d2e20180d2030180d2e40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x175}}, @code={0xa, 0x9c, {"0008285e0030204e000008d5a0088ad20060b8f2e10180d2a20180d2630080d2640080d2020000d4007008d5e0dc99d20020b8f2810180d2a20080d2230080d2240080d2020000d4809f87d20020b8f2410080d2a20080d2630080d2040080d2020000d4c08a8cd20080b8f2610080d2820180d2430180d2a40180d2020000d4007008d5000028d5"}}, @smc={0x1e, 0x40, {0xc4000053, [0x5, 0x7ff, 0x6, 0x81, 0x40]}}, @its_setup={0x82, 0x28, {0x2, 0x2}}, @svc={0x122, 0x40, {0xc4000005, [0x0, 0x75, 0x6, 0xc000000000, 0x2]}}, @irq_setup={0x46, 0x18, {0x3, 0x374}}, @hvc={0x32, 0x40, {0x0, [0xfffffffffffffffe, 0xfffffffffffffffe, 0x7dcb, 0x0, 0x9]}}, @its_setup={0x82, 0x28, {0x2, 0x3, 0x22d}}, @code={0xa, 0xb4, {"000028d50080200e000008d5c08289d20080b0f2210180d2820080d2630080d2240180d2020000d4402285d200c0b8f2210180d2620080d2630080d2040180d2020000d4000840fa40c984d200e0b0f2010080d2820180d2e30080d2a40180d2020000d4802c9ad200e0b0f2a10080d2420080d2030080d2a40080d2020000d440e58bd20060b0f2a10080d2620080d2230180d2c40180d2020000d40040202e"}}], 0x3ec}], 0x1, 0x0, &(0x7f00000007c0)=[@featur1={0x1, 0xc3}], 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000840)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000800)=0xff}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000880)={0x2, 0x40}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r9 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000e00)={0x0, &(0x7f00000008c0)=[@eret={0xe6, 0x18, 0x1}, @msr={0x14, 0x20, {0x603000000013df71, 0x9}}, @eret={0xe6, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x1049}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x397}}, @uexit={0x0, 0x18, 0xb}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x30e}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x40, 0x3, 0x4}}, @memwrite={0x6e, 0x30, @generic={0x60000, 0x459, 0x7, 0x1}}, @code={0xa, 0x9c, {"c0049bd20020b0f2a10080d2020180d2a30080d2240180d2020000d480639ed20000b8f2210080d2e20180d2230080d2c40180d2020000d4007008d500004039000028d5003c0053000028d540b094d200a0b0f2410180d2c20080d2630180d2440080d2020000d4007008d5c0ff9ad200c0b0f2e10080d2a20180d2830080d2e40180d2020000d4"}}, @msr={0x14, 0x20, {0x603000000013df7f, 0xfffffffffffffc00}}, @memwrite={0x6e, 0x30, @generic={0xeecd0006, 0xc73, 0xa010, 0x2}}, @irq_setup={0x46, 0x18, {0x1, 0x12a}}, @svc={0x122, 0x40, {0x4000000, [0xfffffffffffffffe, 0xfffffffffffffffd, 0x3, 0xd45, 0x1]}}, @irq_setup={0x46, 0x18, {0x4, 0x138}}, @its_setup={0x82, 0x28, {0x7, 0x4, 0x246}}, @memwrite={0x6e, 0x30, @generic={0x200000, 0xb2, 0x5, 0x2}}, @svc={0x122, 0x40, {0x40000000, [0x9, 0x2a7b, 0x7ff, 0x2229, 0x5c]}}, @code={0xa, 0x84, {"400296d200e0b8f2010080d2620080d2e30080d2c40180d2020000d40820201e000008d5000008d540528ed200c0b0f2010180d2820180d2c30080d2c40180d2020000d480d492d20080b8f2810180d2020080d2c30080d2a40180d2020000d40000229e004cc09a000028d50084800d"}}, @uexit={0x0, 0x18, 0x80000001}, @code={0xa, 0xb4, {"00149cd20060b8f2010180d2420180d2030180d2440180d2020000d4409384d20080b0f2010080d2020180d2230080d2040080d2020000d4e05582d20080b8f2610080d2220080d2030180d2240080d2020000d4007008d50014202e20f99ed200c0b0f2810180d2a20080d2830180d2240180d2020000d4007008d5000040adc09d8cd200c0b0f2410180d2c20180d2230080d2240180d2020000d40000009b"}}, @eret={0xe6, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x4, 0x3b3}}, @svc={0x122, 0x40, {0x8400000f, [0x80, 0x3, 0x8, 0x4, 0xa]}}, @irq_setup={0x46, 0x18, {0x1, 0x20}}, @hvc={0x32, 0x40, {0x800, [0x8001, 0x10001, 0x7, 0x2, 0x9]}}], 0x53c}, &(0x7f0000000e40)=[@featur2={0x1, 0x95}], 0x1) mmap$KVM_VCPU(&(0x7f0000fb9000/0x4000)=nil, r8, 0x0, 0x11, r9, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x38) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_S390_VCPU_FAULT(r12, 0x4008ae52, &(0x7f0000000ec0)=0x10001) ioctl$KVM_CAP_DIRTY_LOG_RING(r11, 0x4068aea3, &(0x7f0000000f00)={0xc0, 0x0, 0xe000}) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000e8b000/0x4000)=nil, r8, 0x3000008, 0x810, r7, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r12, 0xaead) r14 = syz_kvm_vgic_v3_setup(r13, 0x4, 0x440) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000fc0)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f0000000f80)=0x10}) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000001000)=0x4) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x34) 0s ago: executing program 42 (id=145): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000003, [0x664b7dee, 0x939, 0xe, 0x7f, 0x8000000000000000]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 380.998445][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.919613][ T3166] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:11954' (ED25519) to the list of known hosts. [ 592.035429][ T25] audit: type=1400 audit(591.230:61): avc: denied { name_bind } for pid=3318 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 593.876448][ T25] audit: type=1400 audit(593.090:62): avc: denied { execute } for pid=3319 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 593.945372][ T25] audit: type=1400 audit(593.130:63): avc: denied { execute_no_trans } for pid=3319 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 614.362672][ T25] audit: type=1400 audit(613.580:64): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 614.416524][ T25] audit: type=1400 audit(613.630:65): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.500536][ T3319] cgroup: Unknown subsys name 'net' [ 614.579151][ T25] audit: type=1400 audit(613.800:66): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 615.053898][ T3319] cgroup: Unknown subsys name 'cpuset' [ 615.197431][ T3319] cgroup: Unknown subsys name 'rlimit' [ 616.138069][ T25] audit: type=1400 audit(615.360:67): avc: denied { setattr } for pid=3319 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 616.163383][ T25] audit: type=1400 audit(615.370:68): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 616.180680][ T25] audit: type=1400 audit(615.400:69): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 617.208430][ T3323] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 617.229045][ T25] audit: type=1400 audit(616.440:70): avc: denied { relabelto } for pid=3323 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 617.254012][ T25] audit: type=1400 audit(616.460:71): avc: denied { write } for pid=3323 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 617.433709][ T25] audit: type=1400 audit(616.650:72): avc: denied { read } for pid=3319 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 617.453020][ T25] audit: type=1400 audit(616.670:73): avc: denied { open } for pid=3319 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 617.500829][ T3319] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 669.299482][ T25] audit: type=1400 audit(668.490:74): avc: denied { execmem } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 673.645948][ T25] audit: type=1400 audit(672.860:75): avc: denied { read } for pid=3326 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.672679][ T25] audit: type=1400 audit(672.890:76): avc: denied { open } for pid=3326 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.753038][ T25] audit: type=1400 audit(672.970:77): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 674.055536][ T25] audit: type=1400 audit(673.270:78): avc: denied { module_request } for pid=3326 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 675.018363][ T25] audit: type=1400 audit(674.230:79): avc: denied { sys_module } for pid=3326 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 697.705840][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.238700][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.332732][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.763313][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.456891][ T3326] hsr_slave_0: entered promiscuous mode [ 713.483549][ T3326] hsr_slave_1: entered promiscuous mode [ 714.276193][ T3327] hsr_slave_0: entered promiscuous mode [ 714.316524][ T3327] hsr_slave_1: entered promiscuous mode [ 714.356307][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 714.365797][ T3327] Cannot create hsr debugfs directory [ 720.031028][ T25] audit: type=1400 audit(719.230:80): avc: denied { create } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 720.060322][ T25] audit: type=1400 audit(719.270:81): avc: denied { write } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 720.156658][ T25] audit: type=1400 audit(719.370:82): avc: denied { read } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 720.329947][ T3326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 720.593494][ T3326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 720.812620][ T3326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 721.022209][ T3326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.953469][ T3327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 723.193994][ T3327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 723.451286][ T3327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 723.613516][ T3327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 734.590035][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.446111][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.233078][ T3326] veth0_vlan: entered promiscuous mode [ 788.838887][ T3326] veth1_vlan: entered promiscuous mode [ 790.820490][ T3326] veth0_macvtap: entered promiscuous mode [ 791.191058][ T3327] veth0_vlan: entered promiscuous mode [ 791.259148][ T3326] veth1_macvtap: entered promiscuous mode [ 792.033060][ T3327] veth1_vlan: entered promiscuous mode [ 793.681065][ T21] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.720340][ T21] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.802648][ T21] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.808427][ T21] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.920611][ T3327] veth0_macvtap: entered promiscuous mode [ 795.580633][ T3327] veth1_macvtap: entered promiscuous mode [ 796.330229][ T25] audit: type=1400 audit(795.530:83): avc: denied { mount } for pid=3326 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 796.506668][ T25] audit: type=1400 audit(795.660:84): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/syzkaller.GyKyyn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 796.669190][ T25] audit: type=1400 audit(795.880:85): avc: denied { mount } for pid=3326 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 797.049972][ T25] audit: type=1400 audit(796.250:86): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/syzkaller.GyKyyn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 797.212820][ T25] audit: type=1400 audit(796.410:87): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/syzkaller.GyKyyn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 797.781043][ T25] audit: type=1400 audit(797.000:88): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 797.880031][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.891184][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.919229][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.951830][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.117017][ T25] audit: type=1400 audit(797.330:89): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 798.236811][ T25] audit: type=1400 audit(797.450:90): avc: denied { mount } for pid=3326 comm="syz-executor" name="/" dev="gadgetfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 798.691738][ T25] audit: type=1400 audit(797.910:91): avc: denied { mount } for pid=3326 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 798.779176][ T25] audit: type=1400 audit(797.980:92): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 800.371176][ T3326] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 801.357854][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 801.376514][ T25] audit: type=1400 audit(800.560:95): avc: denied { open } for pid=3326 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 801.400180][ T25] audit: type=1400 audit(800.610:96): avc: denied { ioctl } for pid=3326 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 811.999529][ T25] audit: type=1400 audit(811.220:97): avc: denied { read } for pid=3478 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 812.086810][ T25] audit: type=1400 audit(811.280:98): avc: denied { open } for pid=3478 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 812.857549][ T25] audit: type=1400 audit(812.040:99): avc: denied { ioctl } for pid=3478 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 815.591753][ T25] audit: type=1400 audit(814.810:100): avc: denied { append } for pid=3481 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 840.488397][ T25] audit: type=1400 audit(839.690:101): avc: denied { write } for pid=3499 comm="syz.0.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 907.727660][ T25] audit: type=1400 audit(906.900:102): avc: denied { execute } for pid=3545 comm="syz.1.20" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 921.375861][ T25] audit: type=1400 audit(920.580:103): avc: denied { ioctl } for pid=3549 comm="syz.0.22" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1031.620176][ T25] audit: type=1400 audit(1030.810:104): avc: denied { create } for pid=3620 comm="syz.0.48" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1031.727848][ T25] audit: type=1400 audit(1030.940:105): avc: denied { map } for pid=3620 comm="syz.0.48" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=6184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1031.782493][ T25] audit: type=1400 audit(1030.990:106): avc: denied { read } for pid=3620 comm="syz.0.48" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=6184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1111.010992][ T3649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.447437][ T3649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.448265][ T3649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.008166][ T3649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.340866][ T3649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.489231][ T3649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.596285][ T3649] bond0 (unregistering): Released all slaves [ 1131.108114][ T3649] hsr_slave_0: left promiscuous mode [ 1131.348257][ T3649] hsr_slave_1: left promiscuous mode [ 1132.285603][ T3649] veth1_macvtap: left promiscuous mode [ 1132.300311][ T3649] veth0_macvtap: left promiscuous mode [ 1132.317059][ T3649] veth1_vlan: left promiscuous mode [ 1132.338225][ T3649] veth0_vlan: left promiscuous mode [ 1152.940963][ T3649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.792598][ T3649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.643130][ T3649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.657606][ T3649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.097746][ T3649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.237779][ T3649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.338191][ T3649] bond0 (unregistering): Released all slaves [ 1169.489765][ T3649] hsr_slave_0: left promiscuous mode [ 1169.556229][ T3649] hsr_slave_1: left promiscuous mode [ 1170.182256][ T3649] veth1_macvtap: left promiscuous mode [ 1170.220100][ T3649] veth0_macvtap: left promiscuous mode [ 1170.236096][ T3649] veth1_vlan: left promiscuous mode [ 1170.246510][ T3649] veth0_vlan: left promiscuous mode [ 1204.559603][ T3645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.083464][ T3645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.709343][ T3639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.287411][ T3639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.002387][ T3645] hsr_slave_0: entered promiscuous mode [ 1224.051591][ T3645] hsr_slave_1: entered promiscuous mode [ 1226.248876][ T3639] hsr_slave_0: entered promiscuous mode [ 1226.292801][ T3639] hsr_slave_1: entered promiscuous mode [ 1226.356473][ T3639] debugfs: 'hsr0' already exists in 'hsr' [ 1226.359686][ T3639] Cannot create hsr debugfs directory [ 1236.712020][ T3645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1237.149808][ T3645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1237.432040][ T3645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1237.923702][ T3645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1241.811055][ T3639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1242.102105][ T3639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1242.320762][ T3639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1242.541801][ T3639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1264.839985][ T3645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.106504][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.963891][ T3645] veth0_vlan: entered promiscuous mode [ 1353.747256][ T3645] veth1_vlan: entered promiscuous mode [ 1356.751304][ T3645] veth0_macvtap: entered promiscuous mode [ 1357.490850][ T3645] veth1_macvtap: entered promiscuous mode [ 1358.742134][ T3639] veth0_vlan: entered promiscuous mode [ 1360.272489][ T3639] veth1_vlan: entered promiscuous mode [ 1361.888917][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.890351][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.891454][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.892233][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.961441][ T3639] veth0_macvtap: entered promiscuous mode [ 1367.030580][ T3639] veth1_macvtap: entered promiscuous mode [ 1371.412781][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.417435][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.418319][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.419132][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.225848][ T25] audit: type=1400 audit(1590.380:107): avc: denied { setattr } for pid=4028 comm="syz.2.84" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1658.567078][ T3843] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.291663][ T3843] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.657625][ T3843] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.110540][ T3843] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.540608][ T3843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.747020][ T3843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.891581][ T3843] bond0 (unregistering): Released all slaves [ 1684.858816][ T3843] hsr_slave_0: left promiscuous mode [ 1685.295178][ T3843] hsr_slave_1: left promiscuous mode [ 1686.511671][ T3843] veth1_macvtap: left promiscuous mode [ 1686.557527][ T3843] veth0_macvtap: left promiscuous mode [ 1686.577614][ T3843] veth1_vlan: left promiscuous mode [ 1686.607942][ T3843] veth0_vlan: left promiscuous mode [ 1708.221803][ T3843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.650841][ T3843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.790792][ T3843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.696861][ T3843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.119359][ T3843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.332561][ T3843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.489070][ T3843] bond0 (unregistering): Released all slaves [ 1731.698174][ T3843] hsr_slave_0: left promiscuous mode [ 1731.806093][ T3843] hsr_slave_1: left promiscuous mode [ 1732.505393][ T3843] veth1_macvtap: left promiscuous mode [ 1732.508758][ T3843] veth0_macvtap: left promiscuous mode [ 1732.522525][ T3843] veth1_vlan: left promiscuous mode [ 1732.556501][ T3843] veth0_vlan: left promiscuous mode [ 1777.456688][ T4060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.732355][ T4060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.377435][ T4067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.691798][ T4067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.132419][ T4060] hsr_slave_0: entered promiscuous mode [ 1805.241873][ T4060] hsr_slave_1: entered promiscuous mode [ 1809.713363][ T4067] hsr_slave_0: entered promiscuous mode [ 1809.830813][ T4067] hsr_slave_1: entered promiscuous mode [ 1809.936908][ T4067] debugfs: 'hsr0' already exists in 'hsr' [ 1809.950222][ T4067] Cannot create hsr debugfs directory [ 1821.949068][ T4060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1822.489261][ T4060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1822.952597][ T4060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1823.629774][ T4060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1827.852151][ T4067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1828.240442][ T4067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1828.612432][ T4067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1828.997437][ T4067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1852.570701][ T4060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.291203][ T4067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1981.787521][ T4060] veth0_vlan: entered promiscuous mode [ 1983.079285][ T4060] veth1_vlan: entered promiscuous mode [ 1987.791389][ T4060] veth0_macvtap: entered promiscuous mode [ 1988.787943][ T4067] veth0_vlan: entered promiscuous mode [ 1989.031064][ T4060] veth1_macvtap: entered promiscuous mode [ 1991.227105][ T4067] veth1_vlan: entered promiscuous mode [ 1995.460010][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.479584][ T4069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.482401][ T4069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.689038][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.188497][ T4067] veth0_macvtap: entered promiscuous mode [ 1999.499265][ T4067] veth1_macvtap: entered promiscuous mode [ 2004.677326][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.716804][ T4069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.728942][ T4069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.768884][ T4069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.231706][ T4237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.921796][ T4237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2116.212519][ T4237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.597063][ T4237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.962382][ T4237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2149.880581][ T4237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2150.307456][ T4237] bond0 (unregistering): Released all slaves [ 2153.326790][ T4237] hsr_slave_0: left promiscuous mode [ 2153.457794][ T4237] hsr_slave_1: left promiscuous mode [ 2154.640409][ T4237] veth1_macvtap: left promiscuous mode [ 2154.651629][ T4237] veth0_macvtap: left promiscuous mode [ 2154.692324][ T4237] veth1_vlan: left promiscuous mode [ 2154.736357][ T4237] veth0_vlan: left promiscuous mode [ 2261.370913][ T4350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2261.721642][ T4350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2286.952192][ T25] audit: type=1400 audit(2286.160:108): avc: denied { map } for pid=4455 comm="syz.4.107" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2287.064056][ T25] audit: type=1400 audit(2286.180:109): avc: denied { execute } for pid=4455 comm="syz.4.107" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2305.780189][ T4350] hsr_slave_0: entered promiscuous mode [ 2305.940674][ T4350] hsr_slave_1: entered promiscuous mode [ 2306.090705][ T4350] debugfs: 'hsr0' already exists in 'hsr' [ 2306.126710][ T4350] Cannot create hsr debugfs directory [ 2329.583337][ T4350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2330.308726][ T4350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2330.808811][ T4350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2331.348043][ T4350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2371.937854][ T4350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2547.989478][ T4350] veth0_vlan: entered promiscuous mode [ 2549.597433][ T4350] veth1_vlan: entered promiscuous mode [ 2554.541374][ T4350] veth0_macvtap: entered promiscuous mode [ 2555.537517][ T4350] veth1_macvtap: entered promiscuous mode [ 2560.487870][ T4065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.509034][ T4065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.651059][ T4065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2560.677484][ T4065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.201489][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2770.763098][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2783.539279][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2784.182260][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2802.719197][ T4495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2804.447427][ T4495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.011646][ T4495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2807.632441][ T4495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2830.873755][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2831.248372][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2831.427024][ T4495] bond0 (unregistering): Released all slaves [ 2834.698561][ T4495] hsr_slave_0: left promiscuous mode [ 2835.178864][ T4495] hsr_slave_1: left promiscuous mode [ 2836.147871][ T4495] veth1_macvtap: left promiscuous mode [ 2836.162342][ T4495] veth0_macvtap: left promiscuous mode [ 2836.170172][ T4495] veth1_vlan: left promiscuous mode [ 2836.216143][ T4495] veth0_vlan: left promiscuous mode [ 2860.586610][ T4663] hsr_slave_0: entered promiscuous mode [ 2860.631273][ T4663] hsr_slave_1: entered promiscuous mode [ 2863.827746][ T4667] hsr_slave_0: entered promiscuous mode [ 2863.910739][ T4667] hsr_slave_1: entered promiscuous mode [ 2863.970834][ T4667] debugfs: 'hsr0' already exists in 'hsr' [ 2864.019161][ T4667] Cannot create hsr debugfs directory [ 2867.760767][ T4495] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2870.122277][ T4495] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.783904][ T4495] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.003478][ T4495] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2903.961253][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2904.059948][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2904.171871][ T4495] bond0 (unregistering): Released all slaves [ 2905.652934][ T4495] hsr_slave_0: left promiscuous mode [ 2905.778448][ T4495] hsr_slave_1: left promiscuous mode [ 2906.329328][ T4495] veth1_macvtap: left promiscuous mode [ 2906.332674][ T4495] veth0_macvtap: left promiscuous mode [ 2906.346975][ T4495] veth1_vlan: left promiscuous mode [ 2906.357987][ T4495] veth0_vlan: left promiscuous mode [ 2937.501379][ T4667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2938.382520][ T4667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2939.259907][ T4667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2940.073966][ T4667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2947.833485][ T4663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2948.272292][ T4663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2948.843053][ T4663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2949.558676][ T4663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2978.582659][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2984.789149][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3137.722628][ T4667] veth0_vlan: entered promiscuous mode [ 3139.034073][ T4667] veth1_vlan: entered promiscuous mode [ 3144.679200][ T4663] veth0_vlan: entered promiscuous mode [ 3145.467628][ T4667] veth0_macvtap: entered promiscuous mode [ 3147.000616][ T4667] veth1_macvtap: entered promiscuous mode [ 3147.747243][ T4663] veth1_vlan: entered promiscuous mode [ 3153.686462][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3153.728862][ T3648] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3154.205462][ T3648] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3154.479096][ T3648] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3155.438227][ T4663] veth0_macvtap: entered promiscuous mode [ 3157.168471][ T4663] veth1_macvtap: entered promiscuous mode [ 3162.951068][ T4495] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3162.984005][ T4069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3163.093395][ T4069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3163.136450][ T4069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.507736][ T52] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3362.886723][ T52] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3364.892899][ T52] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3367.600382][ T52] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3402.178891][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3402.487009][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3402.623563][ T52] bond0 (unregistering): Released all slaves [ 3404.765624][ T52] hsr_slave_0: left promiscuous mode [ 3404.865318][ T52] hsr_slave_1: left promiscuous mode [ 3405.535276][ T52] veth1_macvtap: left promiscuous mode [ 3405.538604][ T52] veth0_macvtap: left promiscuous mode [ 3405.558822][ T52] veth1_vlan: left promiscuous mode [ 3405.581928][ T52] veth0_vlan: left promiscuous mode [ 3450.830651][ T52] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.550037][ T52] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3454.130549][ T52] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3456.141838][ T52] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3488.010757][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3488.299591][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3488.519409][ T52] bond0 (unregistering): Released all slaves [ 3490.748194][ T52] hsr_slave_0: left promiscuous mode [ 3490.896582][ T52] hsr_slave_1: left promiscuous mode [ 3492.207519][ T52] veth1_macvtap: left promiscuous mode [ 3492.222891][ T52] veth0_macvtap: left promiscuous mode [ 3492.241757][ T52] veth1_vlan: left promiscuous mode [ 3492.270076][ T52] veth0_vlan: left promiscuous mode [ 3526.098808][ T4972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3526.563429][ T4972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3554.461753][ T4985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3554.939835][ T4985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3570.033690][ T4972] hsr_slave_0: entered promiscuous mode [ 3570.240189][ T4972] hsr_slave_1: entered promiscuous mode [ 3593.605607][ T4972] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3594.977582][ T4985] hsr_slave_0: entered promiscuous mode [ 3595.110014][ T4985] hsr_slave_1: entered promiscuous mode [ 3595.282582][ T4985] debugfs: 'hsr0' already exists in 'hsr' [ 3595.298420][ T4985] Cannot create hsr debugfs directory [ 3595.378788][ T4972] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3595.922911][ T4972] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3596.732061][ T4972] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3641.071951][ T4985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3641.536145][ T4985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3642.160661][ T4985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3642.908110][ T4985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3648.782589][ T4972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3686.568557][ T4985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3824.308433][ T4972] veth0_vlan: entered promiscuous mode [ 3825.697404][ T4972] veth1_vlan: entered promiscuous mode [ 3831.781681][ T4985] veth0_vlan: entered promiscuous mode [ 3831.841710][ T4972] veth0_macvtap: entered promiscuous mode [ 3833.253871][ T4972] veth1_macvtap: entered promiscuous mode [ 3834.369927][ T4985] veth1_vlan: entered promiscuous mode [ 3840.891135][ T4495] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3840.910084][ T4495] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3841.532045][ T52] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3841.542200][ T52] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3842.771200][ T4985] veth0_macvtap: entered promiscuous mode [ 3844.660434][ T4985] veth1_macvtap: entered promiscuous mode [ 3852.647615][ T3648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.679592][ T3648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.748787][ T3648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3852.790448][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4176.220636][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4178.982844][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4181.323770][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4183.887446][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4245.077608][ T5262] hsr_slave_0: entered promiscuous mode [ 4245.173569][ T5262] hsr_slave_1: entered promiscuous mode [ 4245.359675][ T5262] debugfs: 'hsr0' already exists in 'hsr' [ 4245.363853][ T5262] Cannot create hsr debugfs directory [ 4250.657143][ T5264] hsr_slave_0: entered promiscuous mode [ 4250.739830][ T5264] hsr_slave_1: entered promiscuous mode [ 4250.873228][ T5264] debugfs: 'hsr0' already exists in 'hsr' [ 4250.966952][ T5264] Cannot create hsr debugfs directory [ 4328.440818][ T5264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 4329.691976][ T5264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 4330.963503][ T5264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 4333.752726][ T5264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 4344.463758][ T5262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4345.032919][ T5262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4345.843715][ T5262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4346.679833][ T5262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4382.087144][ T27] INFO: task syz.9.145:5246 blocked for more than 430 seconds. [ 4382.138053][ T27] Not tainted syzkaller #0 [ 4382.195774][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4382.221834][ T27] task:syz.9.145 state:D stack:0 pid:5246 tgid:5246 ppid:4972 task_flags:0x400040 flags:0x00000019 [ 4382.297889][ T27] Call trace: [ 4382.298601][ T27] __switch_to+0x584/0xb20 (T) [ 4382.300728][ T27] __schedule+0x1eec/0x33a4 [ 4382.301341][ T27] schedule+0xac/0x27c [ 4382.301834][ T27] schedule_timeout+0x5c/0x1e4 [ 4382.302346][ T27] do_wait_for_common+0x28c/0x444 [ 4382.302821][ T27] wait_for_completion+0x44/0x5c [ 4382.303266][ T27] __synchronize_srcu+0x2a4/0x320 [ 4382.303784][ T27] synchronize_srcu+0x3cc/0x4f0 [ 4382.432599][ T27] mmu_notifier_unregister+0x320/0x42c [ 4382.456261][ T27] kvm_put_kvm+0x698/0xbe8 [ 4382.456945][ T27] kvm_vm_release+0x58/0x78 [ 4382.457427][ T27] __fput+0x4ac/0x980 [ 4382.457909][ T27] ____fput+0x20/0x58 [ 4382.458375][ T27] task_work_run+0x1bc/0x254 [ 4382.458817][ T27] exit_to_user_mode_loop+0xfc/0x178 [ 4382.459242][ T27] el0_svc+0x170/0x234 [ 4382.459757][ T27] el0t_64_sync_handler+0x84/0x12c [ 4382.460240][ T27] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4382.569475][ T27] [ 4382.569475][ T27] Showing all locks held in the system: [ 4382.577213][ T27] 1 lock held by khungtaskd/27: [ 4382.577754][ T27] #0: ffff800087957348 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 4382.580334][ T27] 2 locks held by getty/3194: [ 4382.580734][ T27] #0: 52f0000011c328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4382.582542][ T27] #1: 4fff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8 [ 4382.756938][ T27] 2 locks held by syz-executor/3319: [ 4382.757687][ T27] 3 locks held by kworker/u4:0/3648: [ 4382.758057][ T27] 3 locks held by kworker/u4:6/3653: [ 4382.758385][ T27] 3 locks held by kworker/u4:10/3843: [ 4382.758742][ T27] 3 locks held by kworker/u4:9/4069: [ 4382.759048][ T27] 2 locks held by kworker/u4:11/4237: [ 4382.759392][ T27] 3 locks held by kworker/u4:13/4747: [ 4382.759724][ T27] 2 locks held by kworker/u4:15/4992: [ 4382.760065][ T27] 2 locks held by syz.0.144/5243: [ 4382.760388][ T27] 2 locks held by syz-executor/5264: [ 4382.760705][ T27] 3 locks held by kworker/u4:4/5276: [ 4382.761079][ T27] 2 locks held by kworker/u4:16/5393: [ 4382.761407][ T27] #0: faf000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 4382.763088][ T27] #1: ffff80008f337c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 4382.838079][ T27] 1 lock held by modprobe/5399: [ 4382.838619][ T27] [ 4382.838898][ T27] ============================================= [ 4382.838898][ T27] [ 4403.256630][ T27] INFO: task syz.9.145:5246 blocked for more than 451 seconds. [ 4403.260985][ T27] Not tainted syzkaller #0 [ 4403.266772][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4403.267180][ T27] task:syz.9.145 state:D stack:0 pid:5246 tgid:5246 ppid:4972 task_flags:0x400040 flags:0x00000019 [ 4403.267950][ T27] Call trace: [ 4403.268207][ T27] __switch_to+0x584/0xb20 (T) [ 4403.268751][ T27] __schedule+0x1eec/0x33a4 [ 4403.269247][ T27] schedule+0xac/0x27c [ 4403.269729][ T27] schedule_timeout+0x5c/0x1e4 [ 4403.270231][ T27] do_wait_for_common+0x28c/0x444 [ 4403.270724][ T27] wait_for_completion+0x44/0x5c [ 4403.271173][ T27] __synchronize_srcu+0x2a4/0x320 [ 4403.271694][ T27] synchronize_srcu+0x3cc/0x4f0 [ 4403.272163][ T27] mmu_notifier_unregister+0x320/0x42c [ 4403.272636][ T27] kvm_put_kvm+0x698/0xbe8 [ 4403.273090][ T27] kvm_vm_release+0x58/0x78 [ 4403.273587][ T27] __fput+0x4ac/0x980 [ 4403.440633][ T27] ____fput+0x20/0x58 [ 4403.447277][ T27] task_work_run+0x1bc/0x254 [ 4403.447929][ T27] exit_to_user_mode_loop+0xfc/0x178 [ 4403.448395][ T27] el0_svc+0x170/0x234 [ 4403.448934][ T27] el0t_64_sync_handler+0x84/0x12c [ 4403.449448][ T27] el0t_64_sync+0x198/0x19c [ 4403.450098][ T27] [ 4403.450098][ T27] Showing all locks held in the system: [ 4403.450397][ T27] 2 locks held by kworker/0:0/9: [ 4403.450751][ T27] 1 lock held by khungtaskd/27: [ 4403.451046][ T27] #0: ffff800087957348 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 4403.452887][ T27] 2 locks held by getty/3194: [ 4403.453221][ T27] #0: 52f0000011c328a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4403.587852][ T27] #1: 4fff80008c6db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8 [ 4403.589641][ T27] 3 locks held by kworker/u4:7/3379: [ 4403.589978][ T27] 3 locks held by kworker/u4:0/3648: [ 4403.590262][ T27] 3 locks held by kworker/u4:6/3653: [ 4403.590615][ T27] 3 locks held by kworker/u4:11/4237: [ 4403.590959][ T27] 2 locks held by kworker/u4:13/4747: [ 4403.591261][ T27] 2 locks held by kworker/u4:15/4992: [ 4403.591590][ T27] #0: faf000000cc26948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 4403.593210][ T27] #1: ffff80008fa17c88 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 4403.717560][ T27] 2 locks held by syz.0.144/5243: [ 4403.717930][ T27] 2 locks held by syz-executor/5262: [ 4403.718233][ T27] 2 locks held by syz-executor/5264: [ 4403.718605][ T27] 3 locks held by kworker/u4:16/5393: [ 4403.718913][ T27] 1 lock held by modprobe/5403: [ 4403.719267][ T27] [ 4403.719523][ T27] ============================================= [ 4403.719523][ T27]