last executing test programs: 54m40.418736143s ago: executing program 0 (id=10): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = eventfd2(0x4, 0x80000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x6, 0x4000000, 0x4}}], 0x50}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$arm64(r8, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000280)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r1, 0x3}) write$eventfd(r1, &(0x7f0000000140)=0x3, 0x8) 54m30.848725826s ago: executing program 1 (id=12): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000f7c000/0x2000)=nil, 0x2000) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x80, 0xd5d77004, 0x4, r5}) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 54m26.601046049s ago: executing program 0 (id=13): munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef00000000fcffffffffffff1bf3a3b292e50d9600020000000100000003000000000000000400000000000000320000000000000040000000000000005200008400"], 0x80}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8}) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x7, 0x8000000000000000}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000fb6000/0x2000)=nil, r12, 0x2000000, 0x2b111, r11, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x1, 0x4, 0x2000, &(0x7f000073c000/0x2000)=nil, 0x6, r7}) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r4, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r4, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 54m20.151945271s ago: executing program 1 (id=14): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r3, 0x3, 0xa0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x6, 0x4, 0x0}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x80000001, [0xfffffffffffffde5, 0x3ff, 0x1, 0x4, 0x9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 54m14.253545113s ago: executing program 0 (id=15): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r3, 0x1, 0x100) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000100)={0x1002000, 0x1}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010004e, &(0x7f0000000080)=0x2}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef000000003a08000000000000010000000000000002c0f70000000000030000000000000004020000000000001400000000000000200000000000000084"], 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 54m9.621921656s ago: executing program 1 (id=16): openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x9, 0x81}) (async) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x9, 0x81}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x4, 0x1, 0x5000, 0x1000, &(0x7f0000fb1000/0x1000)=nil, 0x80, r6}) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x8400000a, [0x74a, 0x939, 0xe, 0x9, 0x4]}}], 0x40}, &(0x7f0000000080)=[@featur1={0x1, 0x69}], 0x1) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r12 = syz_kvm_vgic_v3_setup(r3, 0x4, 0x220) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r12, 0x4018aee3, &(0x7f0000000240)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13}) 54m2.792248038s ago: executing program 0 (id=17): r0 = openat$kvm(0x0, &(0x7f0000000040), 0xc0083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1c) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=[@featur1={0x1, 0x633563f6b2813d7}], 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x400454cb, 0x0) 53m56.464375005s ago: executing program 0 (id=18): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xb1) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0x894c, 0x1080001) close(r9) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) write$eventfd(r11, &(0x7f00000001c0)=0x7ffffff, 0xfdef) 53m55.326014688s ago: executing program 1 (id=19): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1fe, 0xa}}) (async) r8 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 53m48.583042379s ago: executing program 0 (id=20): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000300)=[@smc={0x1e, 0x40, {0x31000000, [0x6, 0x9b, 0x3, 0x7ff, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013e091}}, @smc={0x1e, 0x40, {0x1000000, [0xfffffffffffffffb, 0x8, 0x1ff, 0x764, 0x3]}}, @msr={0x14, 0x20, {0x603000000013801c, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x7, 0x2}}, @code={0xa, 0x9c, {"007008d5007008d5405a96d20060b0f2610080d2c20180d2230080d2040080d2020000d40004002f0008c03840aa8ad20000b0f2e10180d2c20080d2830180d2a40180d2020000d400a49ad20040b8f2410080d2e20180d2430080d2040180d2020000d4c07e9dd20040b8f2e10180d2420180d2e30080d2640080d2020000d400e0e00d00a4202e"}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x84, {"80459ad20020b0f2c10080d2420080d2230080d2440080d2020000d480c192d200e0b0f2810080d2420180d2630080d2640180d2020000d4000028d50000181e0084800d00fc002f000cc01a0038212e008f8fd20040b8f2a10080d2a20180d2a30180d2040080d2020000d4000028d5"}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x12f}}, @svc={0x122, 0x40, {0x6000000, [0xc, 0x81, 0x4, 0x6, 0x8]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x22a}}, @eret={0xe6, 0x18, 0x10}, @irq_setup={0x46, 0x18, {0x0, 0x31}}, @eret={0xe6, 0x18, 0x3a57f12b}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x7, 0x5f, 0x1, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x92}}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013989f}}, @code={0xa, 0xb4, {"c0f083d200a0b8f2410180d2020080d2830080d2a40080d2020000d4000400b800c8210ec0ef94d20020b0f2810180d2220180d2430080d2240180d2020000d4c05580d20080b8f2210080d2e20180d2630080d2e40080d2020000d40040621ec0e294d20040b0f2410180d2420080d2030180d2a40180d2020000d400a0002fe0cb91d200c0b8f2410180d2020080d2630080d2640180d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x4632}}, @smc={0x1e, 0x40, {0x84000003, [0x6, 0x0, 0x65, 0x6c5d, 0x8]}}, @svc={0x122, 0x40, {0x4000, [0x7, 0xcb3b, 0x9, 0x8, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x400, 0x0, 0x4}}, @msr={0x14, 0x20, {0x603000000013df44, 0x6}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x280}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0x2, 0x900000, 0x7}}], 0x55c}, &(0x7f0000000080), 0x1) mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, r4, 0xf, 0x10, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x2000}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x10001) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 53m47.878487695s ago: executing program 1 (id=21): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x3, 0x0) write$eventfd(r3, &(0x7f0000000400)=0xfffffffffffffffc, 0x8) write$eventfd(r3, &(0x7f0000000480)=0x8c49, 0x8) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = eventfd2(0xffffffbe, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x80, 0x4, 0x0, r8}) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000ce9000/0x2000)=nil, 0x0, 0x3000008, 0x100010, r4, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r11, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x18}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r10, 0x1, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x5000}) (async) r12 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 53m40.307307835s ago: executing program 1 (id=22): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000000)=0x4) 53m1.9237711s ago: executing program 32 (id=20): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r5 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000300)=[@smc={0x1e, 0x40, {0x31000000, [0x6, 0x9b, 0x3, 0x7ff, 0x5]}}, @mrs={0xbe, 0x18, {0x603000000013e091}}, @smc={0x1e, 0x40, {0x1000000, [0xfffffffffffffffb, 0x8, 0x1ff, 0x764, 0x3]}}, @msr={0x14, 0x20, {0x603000000013801c, 0x8}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf10, 0x7, 0x2}}, @code={0xa, 0x9c, {"007008d5007008d5405a96d20060b0f2610080d2c20180d2230080d2040080d2020000d40004002f0008c03840aa8ad20000b0f2e10180d2c20080d2830180d2a40180d2020000d400a49ad20040b8f2410080d2e20180d2430080d2040180d2020000d4c07e9dd20040b8f2e10180d2420180d2e30080d2640080d2020000d400e0e00d00a4202e"}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x84, {"80459ad20020b0f2c10080d2420080d2230080d2440080d2020000d480c192d200e0b0f2810080d2420180d2630080d2640180d2020000d4000028d50000181e0084800d00fc002f000cc01a0038212e008f8fd20040b8f2a10080d2a20180d2a30180d2040080d2020000d4000028d5"}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x12f}}, @svc={0x122, 0x40, {0x6000000, [0xc, 0x81, 0x4, 0x6, 0x8]}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x22a}}, @eret={0xe6, 0x18, 0x10}, @irq_setup={0x46, 0x18, {0x0, 0x31}}, @eret={0xe6, 0x18, 0x3a57f12b}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x7, 0x5f, 0x1, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x92}}, @uexit={0x0, 0x18, 0x2}, @mrs={0xbe, 0x18, {0x603000000013989f}}, @code={0xa, 0xb4, {"c0f083d200a0b8f2410180d2020080d2830080d2a40080d2020000d4000400b800c8210ec0ef94d20020b0f2810180d2220180d2430080d2240180d2020000d4c05580d20080b8f2210080d2e20180d2630080d2e40080d2020000d40040621ec0e294d20040b0f2410180d2420080d2030180d2a40180d2020000d400a0002fe0cb91d200c0b8f2410180d2020080d2630080d2640180d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x4632}}, @smc={0x1e, 0x40, {0x84000003, [0x6, 0x0, 0x65, 0x6c5d, 0x8]}}, @svc={0x122, 0x40, {0x4000, [0x7, 0xcb3b, 0x9, 0x8, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x400, 0x0, 0x4}}, @msr={0x14, 0x20, {0x603000000013df44, 0x6}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x280}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x2, 0x2, 0x900000, 0x7}}], 0x55c}, &(0x7f0000000080), 0x1) mmap$KVM_VCPU(&(0x7f0000001000/0x4000)=nil, r4, 0xf, 0x10, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x2000}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x10001) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 52m53.249242594s ago: executing program 33 (id=22): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000000)=0x4) 47m57.575802841s ago: executing program 2 (id=23): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x119500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, &(0x7f0000000000)=0x4}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000040)=@arm64_sve_vls={0x606000000015ffff, 0x0}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r7, 0x4068aea3, &(0x7f0000000000)) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x10282, 0x0) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04) r15 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r14, 0x2, 0x11, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000c0b000/0x3000)=nil, r14, 0x1000002, 0x10, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000002c0)="ff000000033b29677c9ba29ea6ab8045a3df061f447d0100000000080000000000000000000000000000000000000000000022000000000000000000ffffff7f00000400", 0x0, 0xfdca) 47m8.921497452s ago: executing program 34 (id=23): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x119500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, &(0x7f0000000000)=0x4}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000040)=@arm64_sve_vls={0x606000000015ffff, 0x0}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r7, 0x4068aea3, &(0x7f0000000000)) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x10282, 0x0) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04) r15 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r14, 0x2, 0x11, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000c0b000/0x3000)=nil, r14, 0x1000002, 0x10, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r15, 0x20, &(0x7f00000002c0)="ff000000033b29677c9ba29ea6ab8045a3df061f447d0100000000080000000000000000000000000000000000000000000022000000000000000000ffffff7f00000400", 0x0, 0xfdca) 45m23.837554719s ago: executing program 3 (id=36): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0x40086602, 0x110e22ffff) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xad, 0x40, 0xcd, '\x00', 0x100}) openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0x40086602, 0x110e22ffff) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0xad, 0x40, 0xcd, '\x00', 0x100}) (async) 45m6.420029288s ago: executing program 3 (id=37): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x7, 0x3}}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) 44m56.721785094s ago: executing program 3 (id=38): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x90241, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x8, 0x40000000000000, 0x0}) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x81}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100050, &(0x7f0000000000)=0x12}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x1}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) syz_kvm_vgic_v3_setup(r1, 0x2, 0x110) r9 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x29) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r11, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, &(0x7f0000000000)=0x4}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x27) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x5, 0x2}}], 0x28}, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r14, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x8000}) syz_kvm_vgic_v3_setup(r14, 0x40000000000004, 0xc0) 44m40.17732241s ago: executing program 3 (id=39): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f932, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r3, 0x4068aea3, &(0x7f0000000180)) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r3, 0x3, 0xa0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000140)={0x100, 0xff}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x0, 0xf, 0x2}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r5, 0xae80, 0x0) 44m28.680326842s ago: executing program 3 (id=40): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x4, 0x80a, 0x1}}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r7, 0x0, 0x40032, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x81) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000080)) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r11, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100032, &(0x7f00000000c0)=0x3ff}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x1}) 44m16.665181966s ago: executing program 3 (id=41): openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=[@featur2={0x1, 0x1}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0x7, 0xbe}}) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000e8c000/0x4000)=nil, 0x0, 0x3000000, 0x40011, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x31) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000000)={0x3b381003, 0x100000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r14, 0x2000003, 0x11, r12, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 43m26.45973016s ago: executing program 35 (id=41): openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=[@featur2={0x1, 0x1}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000002c0)={0x7, 0xbe}}) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f0000e8c000/0x4000)=nil, 0x0, 0x3000000, 0x40011, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x31) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000000)={0x3b381003, 0x100000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r14, 0x2000003, 0x11, r12, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) 37m58.537224824s ago: executing program 4 (id=53): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37m43.640698429s ago: executing program 4 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x0, 0x10, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r1, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x5, 0x35e}}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0x5, 0x35e}}) 37m35.159554016s ago: executing program 4 (id=55): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r2, 0x600000c, 0x28031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) 37m23.869326531s ago: executing program 4 (id=56): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd, 0xf}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 37m8.404377632s ago: executing program 4 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x101fd, 0x2, 0xdddd1000, 0x1000, &(0x7f0000ecd000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x5, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 37m2.430440243s ago: executing program 5 (id=42): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000e0f000/0x2000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x7, 0x6c7}) r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_vgic_v3_setup(r3, 0x4000000000000001, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 36m53.349441571s ago: executing program 4 (id=58): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x800}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010000e, &(0x7f0000000200)=0x4}) r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0xffffff20) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013e641, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c6a000/0x3000)=nil, 0x930, 0x1000003, 0x28031, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000e7b000/0x2000)=nil, 0x0, 0x9, 0x80010, r12, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f00000002c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000280)=0x1}) ioctl$KVM_KVMCLOCK_CTRL(r12, 0xaead) r13 = ioctl$KVM_GET_STATS_FD_cpu(r12, 0xaece) ioctl$KVM_DIRTY_TLB(r13, 0x4010aeaa, &(0x7f0000000100)={0x7, 0x8}) syz_kvm_setup_cpu$arm64(r9, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="e60000000000000018000000000000007c00000000000000460000000000000018000000000000000000000069000000be000000000000001800000000000000d8e6130000003060be000000000000001800000000000000b0f2130000003060220100000000000000000500000000000000060000000000000008000000000000000800000000000000060000000000000032000000000000004000000000000000800000000000000000020000000000000300000000000000000000000100000000000000000010000e00000000000000820000000000000028000000000000000300000000000000000000000000000088030000000000003200000000000000400000000000000000000040000000000600000000000000ffffffff000000000300000000000000460900000000000000000000000000001400000000000000200000000000000008c213000000306003000000000000000000000000000000180000000000000002000000000000002201000000000000400000000000000000000080000000000200000000000000ff010000000000000600000000000000030000000000000001000000000000000a00db469e1b4d910000000000006c00000000000000008008d500a8215e007008d50000589e000008d5007008d5000008d580b482d200c0b0f2810080d2a20180d2430180d2e40080d2020000d4007008d5e0f69ad200e0b0f2610080d2220180d2230080d2e40180d2020000d4c0035fd6be000000000000001800000000000000b6de130000003060220100000000000040000000000000005000008400000000001000000000000018080000000000000500000000000000001000000000000004000000000000000a000000000000005400000000000200007008d5020000d4007008d5007008d5a0278ad20060b0f2810180d2620080d2230080d2440180d2020000d40004601e00000011007008d5000008d50058284ec0035fd622010000000000004000000000000000530000c400000000e3a7000000000000030000000000000001040000000000000100010000000000040000000000000032000000000000004000000000000000010000c400000000070000000000000003000000000000008c2e000000000000ff030000000000000c00000000000000220100000000000040000000000000000080008000000000ff03000000000000f30000000000000067000000000000000000000000000000020000000000000022010000000000004000000000000000030000c4000000000400000000000000ff7f0000000000000e00000000000000000000010000000006000000000000006e00000000000000300000000000000000000a0800000000000d00000000000005000000000000000800000000000000aa0000000000000028000000000000000f01020000002e0d0000020000000500000003000000000014000000000000002000000000000000c8e41300000030608100000000000000220100000000000040000000000000005300008400000000ffffffffffffffff0900000008000000000000a800000000000000000000000000000018000000000000000300000000000000be000000000000001800000000000000e1dc13000000306022010000000000004000000000000000200000c50000000002000000000000000600000000000000010000000100000000e00000000000000700000000000000320000000000000040000000000000000000000600000000faffffffffffffffffffff7f000000000400000000000000001000000000000040000000000000000500008400000000ff010000000000000400000000000000ff010000000000000100000000000000070000000000000081190d055a730420729ed2d7fcae0080bc6ee1c62d187da7f2c4500ffab831a876900ba71c7d1a33d5530855b873c5a9b77faf45eb2883bac5f433b57aeb7cb703898f8c158b90394cb70b2ef16351"], 0x580}], 0x1, 0x0, &(0x7f00000001c0)=[@featur1={0x1, 0x3}], 0x1) 36m11.802404096s ago: executing program 36 (id=42): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000e0f000/0x2000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x7, 0x6c7}) r6 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_vgic_v3_setup(r3, 0x4000000000000001, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) r9 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0x220) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 36m2.400349456s ago: executing program 37 (id=58): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x800}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, &(0x7f0000000240)=@arm64_core={0x603000000010000e, &(0x7f0000000200)=0x4}) r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0xffffff20) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000080)=@arm64_sys={0x603000000013e641, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c6a000/0x3000)=nil, 0x930, 0x1000003, 0x28031, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000e7b000/0x2000)=nil, 0x0, 0x9, 0x80010, r12, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r11, 0x4018aee2, &(0x7f00000002c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000280)=0x1}) ioctl$KVM_KVMCLOCK_CTRL(r12, 0xaead) r13 = ioctl$KVM_GET_STATS_FD_cpu(r12, 0xaece) ioctl$KVM_DIRTY_TLB(r13, 0x4010aeaa, &(0x7f0000000100)={0x7, 0x8}) syz_kvm_setup_cpu$arm64(r9, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x580}], 0x1, 0x0, &(0x7f00000001c0)=[@featur1={0x1, 0x3}], 0x1) 16m34.898926507s ago: executing program 6 (id=134): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x5}) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x5d) 16m10.056673914s ago: executing program 6 (id=136): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f00000001c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0x80111500, 0x20000000) close(r3) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000000)=0xeac) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x8400000a, [0x74a, 0x939, 0xe, 0x9, 0x4]}}], 0x40}, &(0x7f0000000080)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f932, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1}) 15m46.084628197s ago: executing program 6 (id=138): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200840, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r3 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000240)=0xfffffffffffffffe}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x0, &(0x7f00000002c0)=0x2c172c22}) 15m25.87241489s ago: executing program 6 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc4002, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r1, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf) (rerun: 64) 15m13.727058998s ago: executing program 6 (id=142): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) ioctl$KVM_ARM_VCPU_FINALIZE(r3, 0x4004aec2, &(0x7f0000000000)=0x4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r7, 0x2, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000100)={0x100001f, 0x1}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x27) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x5, 0x200000000001}}], 0x28}, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r12, 0x4010ae67, &(0x7f0000000000)={0x80a0000, 0x2000}) syz_kvm_vgic_v3_setup(r12, 0x40000000000004, 0xc0) ioctl$KVM_RUN(r14, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x2c) r17 = syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) r18 = syz_kvm_add_vcpu$arm64(r17, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000040)=@arm64_sve={0x6080000000150537, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 14m45.89148279s ago: executing program 7 (id=144): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, &(0x7f0000000040)) 14m45.55966279s ago: executing program 6 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x1, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 14m33.359695253s ago: executing program 7 (id=146): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r3, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4000ae84, &(0x7f0000000280)={{0x2000, 0x1, 0x8, 0x8d, 0xff, 0x97, 0x7, 0x8f, 0x7, 0xa5, 0x5, 0x4}, {0x1000, 0x3000, 0x10, 0x6, 0xf2, 0x5, 0x80, 0x1, 0x4, 0xc, 0x1, 0x8}, {0x2000, 0x8080000, 0xe, 0xcf, 0x18, 0x5, 0x3, 0x8f, 0x9, 0x6, 0x2, 0x3}, {0xdddd0000, 0x10000, 0x0, 0x50, 0x9, 0x5, 0x1, 0x0, 0x2, 0x93, 0x7, 0xf7}, {0xeeee8000, 0x8080000, 0x8, 0x0, 0x5, 0x9, 0x80, 0x1, 0x5, 0x1, 0x8, 0x3}, {0x1, 0xffff1000, 0x0, 0x6, 0x4, 0x9, 0x1, 0x5, 0x2, 0x4, 0x9, 0x4}, {0xc000, 0x5004, 0x18, 0x3, 0xff, 0x2, 0x1, 0x81, 0x1, 0x3, 0x7, 0x8}, {0xeeee0000, 0x111000, 0x8, 0xf, 0x8, 0xff, 0x2, 0x8, 0x4, 0x3, 0x3, 0xa8}, {0xeeee0000, 0x400}, {0xdddd0000}, 0xc0010021, 0x0, 0xeeef0000, 0x0, 0x4, 0xc500, 0xd000, [0x6b, 0x0, 0x814, 0x7]}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x101280, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11) r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x3, 0x0, &(0x7f0000000240)=0x100}) 14m14.798548952s ago: executing program 7 (id=147): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x0, 0x2, 0x30, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) close(0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r10, 0x7, 0x32, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f91000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x69) 13m56.808874055s ago: executing program 38 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x1, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 13m29.829989616s ago: executing program 7 (id=149): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x6, 0x7fffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000040)={0x101ff, 0x0, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5, r1}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000100)={0xf, 0x3}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000340)={0x0, &(0x7f0000000140)=[@mrs={0xbe, 0x18, {0x603000000013e110}}, @svc={0x122, 0x40, {0x80007fff, [0x7, 0x1, 0x4, 0x1000, 0x40]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x3e0}}, @eret={0xe6, 0x18, 0x626b}, @smc={0x1e, 0x40, {0x200, [0xfffffffffffffff9, 0x2c15, 0x7f, 0x4, 0x3]}}, @code={0xa, 0x6c, {"000028d5000008d5a0c886d200e0b8f2c10180d2220080d2230080d2c40180d2020000d40000389e0000ff0d000028d50008c03800e4200e0000c0aca0708dd20040b8f2410180d2420080d2830180d2c40080d2020000d4"}}, @irq_setup={0x46, 0x18, {0x1, 0x2bc}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x0, 0x7, 0xf, 0x590, 0x4}}, @hvc={0x32, 0x40, {0x84000006, [0x3, 0x6, 0x5, 0x3ff, 0x1]}}], 0x1c4}, &(0x7f0000000380)=[@featur1={0x1, 0x58}], 0x1) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000c1b000/0x3000)=nil, r4, 0x1, 0x11, r3, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r6 = eventfd2(0x8, 0x80800) close(r6) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f00000003c0)) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000440)={r6, 0x9, 0x2, r6}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000004c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000480)={0x6, 0x8}}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000540)=@attr_other={0x0, 0x2, 0x7fff, &(0x7f0000000500)=0xb}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x400200, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r5, 0x4018aee2, &(0x7f0000000600)=@attr_other={0x0, 0x9, 0x100000001, &(0x7f00000005c0)=0x43}) mmap$KVM_VCPU(&(0x7f0000c6b000/0x3000)=nil, r4, 0x2000008, 0x10, r3, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000640)=0x95) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000a80)={0x10000, 0x180, 0x340, &(0x7f0000000680)=[0x10001, 0x81, 0x6, 0x4, 0x94f7, 0x5, 0x4, 0x1, 0x8, 0x8, 0x1, 0x2d, 0x1, 0x5, 0x7fffffffffffffff, 0xff, 0x0, 0x100, 0x1000, 0x9, 0x3, 0x5, 0x1ff, 0x7, 0x32, 0x4, 0x5749, 0x2, 0x6, 0x7, 0xce9, 0x100, 0x1, 0x3ff, 0x8, 0x0, 0xf7, 0x2d4, 0x6, 0x7f, 0x7fff, 0x0, 0x9, 0xfffffffffffffffc, 0x8000000000000001, 0x7, 0xa, 0x3, 0x5fe7, 0x0, 0x3, 0x7, 0x3, 0x101, 0x2, 0x8, 0xffffffffffffffff, 0x1, 0x3, 0x49d, 0x90dc, 0x3, 0x2, 0x5, 0xfffffffffffffff0, 0x8, 0xffffffffffffffff, 0x9, 0x100000000, 0x7, 0x4, 0xfffffffffffffffc, 0x4, 0x5, 0x4, 0x529518be, 0x6, 0x4, 0x8, 0x2, 0x6, 0x7fff, 0x8000, 0x4, 0x5, 0x1, 0x9, 0x7, 0x4, 0x2, 0x0, 0x200, 0x0, 0x9, 0xa, 0x0, 0xd, 0x3, 0x6e, 0xcd, 0xffffffff80000000, 0x100, 0xe0, 0x9, 0x4, 0x2, 0x2, 0xb4, 0xffff, 0x0, 0xfff, 0x8, 0xd0, 0x4b9a, 0x3, 0x81, 0xfffffffffffffffc, 0x61, 0x200, 0x7, 0x9, 0x2, 0x7f, 0x7, 0x76, 0x6, 0x101, 0xd]}) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x2, 0x80) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000b00)=@attr_other={0x0, 0x4, 0x1, &(0x7f0000000ac0)=0x8}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000b40)={0x4, 0x0, 0x7}) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r7, 0x4068aea3, &(0x7f0000000b80)) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r8, 0x4068aea3, &(0x7f0000000c00)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000c80)={0x3, 0x13a4708b, 0x7a}) 13m15.801770434s ago: executing program 7 (id=150): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r1, 0x8000ae83, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r2, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x2, 0x0, 0x0}) 12m58.62022598s ago: executing program 7 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_assert_reg(r5, 0x603000000013df1a, 0x8000) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) 12m9.987142523s ago: executing program 39 (id=151): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_assert_reg(r5, 0x603000000013df1a, 0x8000) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) 2m46.655241822s ago: executing program 9 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8840, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x15) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) 2m32.798783916s ago: executing program 8 (id=161): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r4, 0x0) (fail_nth: 1) 2m28.792708279s ago: executing program 9 (id=162): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@code={0xa, 0xb4, {"e0c69ad20060b8f2410080d2e20180d2e30180d2640180d2020000d4007008d5207e9bd200c0b0f2210080d2e20080d2630080d2640180d2020000d480b497d20040b8f2810080d2420080d2a30080d2a40180d2020000d400000014000028d50078200ee01e95d200e0b0f2610080d2e20080d2e30180d2040080d2020000d440dd89d200e0b8f2610080d2220180d2030080d2240180d2020000d4007008d5"}}, @msr={0x14, 0x20, {0x5f90483abb2b00da, 0xfffffffffffffff9}}, @hvc={0x32, 0x40, {0xd, [0xa1, 0x4, 0x3, 0xe8cb, 0x2]}}, @uexit={0x0, 0x18}, @svc={0x122, 0x40, {0x80, [0x49, 0x7, 0x7fff]}}, @code={0xa, 0xcc, {"c0b292d200e0b0f2a10180d2220180d2630080d2a40080d2020000d420d885d20080b8f2c10080d2220080d2230180d2840180d2020000d4000080d2e07488d200e0b0f2010080d2c20180d2830080d2440180d2020000d4007008d5803486d20040b8f2410080d2820080d2a30180d2a40080d2020000d460cb8ed20000b8f2e10180d2c20180d2e30080d2c40080d2020000d4008008d560119ed200a0b0f2810180d2220080d2c30180d2440080d2020000d40084004f"}}, @uexit={0x0, 0x18, 0xc822}, @hvc={0x32, 0x40, {0xc4000004, [0xfffffffffffffffc, 0x100000000, 0xec, 0x4, 0x1ff]}}, @smc={0x1e, 0x40, {0x84000007, [0x5, 0x0, 0x6, 0x1, 0x4]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x12c}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x81}}, @smc={0x1e, 0x40, {0x84000012, [0x28, 0x8000000000000000, 0x4, 0x3, 0x6]}}, @svc={0x122, 0x40, {0x8400000b, [0x0, 0x3, 0x100000000, 0x1, 0xfffffffffffffffd]}}, @irq_setup={0x46, 0x18, {0x3, 0x27a}}, @msr={0x14, 0x20, {0x603000000013f510, 0x7}}, @code={0xa, 0xe4, {"00a8a15ee05688d20060b8f2e10180d2620080d2e30180d2440180d2020000d4a0939dd200a0b0f2010180d2020080d2e30080d2a40080d2020000d4a0b19fd20000b0f2410080d2420080d2830080d2440180d2020000d4e05098d200c0b8f2c10180d2220080d2630180d2a40180d2020000d4c0df88d20080b0f2810080d2e20080d2030080d2840180d2020000d400fca00e408791d20000b8f2210180d2420080d2630080d2240080d2020000d4007008d5c0e483d200e0b8f2610080d2a20180d2230180d2040180d2020000d4"}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x1c4}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x109}}, @code={0xa, 0x9c, {"0074002f000800f8007008d5c07386d20080b0f2610080d2420080d2e30180d2040180d2020000d4000028d5205580d20060b8f2010180d2e20180d2e30180d2440180d2020000d4a0298bd20040b0f2810080d2620180d2c30080d2e40080d2020000d4007008d5200c8ad20000b8f2e10180d2c20080d2230080d2a40080d2020000d4007008d5"}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x40, 0x2, 0x6}}, @irq_setup={0x46, 0x18, {0x3, 0x94}}, @mrs={0xbe, 0x18, {0x603000000013e180}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x54, 0x3, 0xd}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x4, 0x8, 0xffff, 0xfff, 0x1}}, @smc={0x1e, 0x40, {0x10, [0x9, 0x7, 0xed0, 0x2, 0x10000]}}, @its_setup={0x82, 0x28, {0x3, 0x1, 0x1eb}}, @mrs={0xbe, 0x18, {0x603000000013c086}}, @its_setup={0x82, 0x28, {0x0, 0x2, 0x341}}, @uexit={0x0, 0x18, 0xfffffffffffffffd}, @code={0xa, 0x6c, {"008008d5603783d20020b8f2410080d2c20080d2830080d2640080d2020000d4c0e994d200e0b8f2a10180d2c20080d2230180d2240080d2020000d4002cc01a008008d500808048000040f800a0c00d008008d50078202e"}}, @smc={0x1e, 0x40, {0xc4000011, [0x6, 0x7, 0x1, 0x1]}}], 0x7d4}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r0, 0x2, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f0000000100)={0x55}) 2m16.428859726s ago: executing program 8 (id=163): munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000d12000/0x2000)=nil, 0x930, 0xa, 0x2010, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010000a, &(0x7f0000000000)=0x10000}) 2m15.03978216s ago: executing program 9 (id=164): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013df40, 0x8000}}], 0x20}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r5, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0x853, 0x0}) (async) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r9 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r8, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_assert_syzos_uexit$arm64(r9, 0xffffffffffffffff) (async) syz_kvm_assert_reg(r2, 0x603000000013df40, 0x8000) 1m57.907260413s ago: executing program 9 (id=165): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@eret={0xe6, 0x18, 0x40}], 0x18}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x15) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}], 0x68}, 0x0, 0x0) r8 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x6, 0x4, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vm(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x7fff}}) 1m57.522131775s ago: executing program 8 (id=166): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000200)=@arm64_fw={0x6030000000140000, &(0x7f0000000240)=0x10001}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) 1m41.08134671s ago: executing program 8 (id=167): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f7c000/0x2000)=nil, 0x2000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000200)="f3b7b18659f78af3656b43f32c7792e1fb16efe6a5d7d6e30185df087b9aeba56c881e2f1ea17623c61d5870d54ec3859b38119bf2adcacfa95f17879a527accb713ad56da8906e6", 0x0, 0x48) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x10200, 0x0) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000009, [0x7, 0x4, 0xe, 0x401, 0x9]}}], 0x40}, &(0x7f0000000180)=[@featur2={0x1, 0x7}], 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) munmap(&(0x7f0000f5e000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 1m35.73890362s ago: executing program 9 (id=168): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a7a836b73312954000000000000000000000000000000000000000000000000000000dc6900", 0x0, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x2000004, 0x2011, r4, 0x0) 1m15.592691001s ago: executing program 8 (id=169): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fe9000/0x1000)=nil, 0x1000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0x40086602, 0x3) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x4, 0x8032, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x26) syz_kvm_vgic_v3_setup(r4, 0x1, 0x1ed) r5 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r5, &(0x7f0000000200)=0x8, 0x8) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x20000000) ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110e227ffe) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r1, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$arm64(r7, r9, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x190}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000008, 0x8032, 0xffffffffffffffff, 0x0) 1m11.16159785s ago: executing program 9 (id=170): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x2b) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x5}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000280)=0x400000080a0000}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x80800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0xa}}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000280)=0x3}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) 51.867211935s ago: executing program 8 (id=171): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 23.330151195s ago: executing program 40 (id=170): mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x2b) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000000000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x5}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000280)=0x400000080a0000}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x80800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x34) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a) ioctl$KVM_SET_DEVICE_ATTR_vm(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0xa}}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r10, r12, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013c00a, &(0x7f0000000280)=0x3}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) 0s ago: executing program 41 (id=171): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 386.590578][ T3150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.504325][ T3150] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:13349' (ED25519) to the list of known hosts. [ 603.809282][ T25] audit: type=1400 audit(603.020:60): avc: denied { name_bind } for pid=3308 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 605.722317][ T25] audit: type=1400 audit(604.910:61): avc: denied { execute } for pid=3309 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 605.746404][ T25] audit: type=1400 audit(604.960:62): avc: denied { execute_no_trans } for pid=3309 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 626.564494][ T25] audit: type=1400 audit(625.780:63): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 626.602098][ T25] audit: type=1400 audit(625.820:64): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 626.683217][ T3309] cgroup: Unknown subsys name 'net' [ 626.735317][ T25] audit: type=1400 audit(625.950:65): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 627.135049][ T3309] cgroup: Unknown subsys name 'cpuset' [ 627.234906][ T3309] cgroup: Unknown subsys name 'rlimit' [ 628.140534][ T25] audit: type=1400 audit(627.360:66): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 628.163243][ T25] audit: type=1400 audit(627.370:67): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 628.188496][ T25] audit: type=1400 audit(627.390:68): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 629.775302][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 629.795061][ T25] audit: type=1400 audit(629.010:69): avc: denied { relabelto } for pid=3312 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 629.816144][ T25] audit: type=1400 audit(629.030:70): avc: denied { write } for pid=3312 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 630.003977][ T25] audit: type=1400 audit(629.220:71): avc: denied { read } for pid=3309 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.028721][ T25] audit: type=1400 audit(629.230:72): avc: denied { open } for pid=3309 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 630.072764][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 680.839417][ T25] audit: type=1400 audit(680.050:73): avc: denied { execmem } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 685.328348][ T25] audit: type=1400 audit(684.540:74): avc: denied { read } for pid=3315 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 685.352677][ T25] audit: type=1400 audit(684.570:75): avc: denied { open } for pid=3315 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 685.468393][ T25] audit: type=1400 audit(684.680:76): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 685.760452][ T25] audit: type=1400 audit(684.950:77): avc: denied { module_request } for pid=3315 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 686.895167][ T25] audit: type=1400 audit(686.110:78): avc: denied { sys_module } for pid=3315 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 715.519549][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.126563][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.210826][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.614059][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.540785][ T3316] hsr_slave_0: entered promiscuous mode [ 728.571693][ T3316] hsr_slave_1: entered promiscuous mode [ 729.669749][ T3315] hsr_slave_0: entered promiscuous mode [ 729.704067][ T3315] hsr_slave_1: entered promiscuous mode [ 729.734278][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 729.749872][ T3315] Cannot create hsr debugfs directory [ 739.209100][ T25] audit: type=1400 audit(738.400:79): avc: denied { create } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.242679][ T25] audit: type=1400 audit(738.460:80): avc: denied { write } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.304065][ T25] audit: type=1400 audit(738.520:81): avc: denied { read } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 739.459014][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.706626][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.100198][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.510345][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 741.994173][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 742.145611][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 742.285039][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.483970][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 755.145691][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.792901][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.273610][ T3316] veth0_vlan: entered promiscuous mode [ 813.782866][ T3316] veth1_vlan: entered promiscuous mode [ 815.474640][ T3315] veth0_vlan: entered promiscuous mode [ 816.165304][ T3316] veth0_macvtap: entered promiscuous mode [ 816.306417][ T3315] veth1_vlan: entered promiscuous mode [ 816.492625][ T3316] veth1_macvtap: entered promiscuous mode [ 819.701006][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.720814][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.734173][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.751679][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.998806][ T3315] veth0_macvtap: entered promiscuous mode [ 820.600221][ T3315] veth1_macvtap: entered promiscuous mode [ 823.022304][ T25] audit: type=1400 audit(822.210:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 823.348316][ T25] audit: type=1400 audit(822.540:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.RHHNzJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 823.639348][ T25] audit: type=1400 audit(822.780:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 824.182281][ T25] audit: type=1400 audit(823.400:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.RHHNzJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 824.448895][ T25] audit: type=1400 audit(823.640:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.RHHNzJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 824.496384][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.509039][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.679624][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.683684][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.494719][ T25] audit: type=1400 audit(824.710:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 825.810640][ T25] audit: type=1400 audit(825.020:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 825.962546][ T25] audit: type=1400 audit(825.170:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 826.410579][ T25] audit: type=1400 audit(825.620:90): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 826.758982][ T25] audit: type=1400 audit(825.890:91): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 828.590753][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 829.349978][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 829.364660][ T25] audit: type=1400 audit(828.550:93): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.408147][ T25] audit: type=1400 audit(828.610:94): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.509990][ T25] audit: type=1400 audit(828.700:95): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 842.829423][ T25] audit: type=1400 audit(842.040:96): avc: denied { read } for pid=3476 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.864025][ T25] audit: type=1400 audit(842.070:97): avc: denied { open } for pid=3476 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 842.999888][ T25] audit: type=1400 audit(842.210:98): avc: denied { ioctl } for pid=3476 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 845.910099][ T25] audit: type=1400 audit(845.110:99): avc: denied { write } for pid=3483 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.330972][ T25] audit: type=1400 audit(862.530:100): avc: denied { execute } for pid=3496 comm="syz.1.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1030.330622][ T3553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.875244][ T3553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.605951][ T3561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.299629][ T3561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.795008][ T3553] hsr_slave_0: entered promiscuous mode [ 1054.852206][ T3553] hsr_slave_1: entered promiscuous mode [ 1054.900052][ T3553] debugfs: 'hsr0' already exists in 'hsr' [ 1054.903024][ T3553] Cannot create hsr debugfs directory [ 1071.305680][ T3561] hsr_slave_0: entered promiscuous mode [ 1071.414394][ T3561] hsr_slave_1: entered promiscuous mode [ 1071.475447][ T3561] debugfs: 'hsr0' already exists in 'hsr' [ 1071.509156][ T3561] Cannot create hsr debugfs directory [ 1074.560111][ T3553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1074.963292][ T3553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1075.276588][ T3553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.656315][ T3553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1088.590656][ T3561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1088.945160][ T3561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1089.274512][ T3561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1089.549669][ T3561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1106.263007][ T3553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.480463][ T3398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.365852][ T3398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.484544][ T3398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.643838][ T3398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.050684][ T3561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.596211][ T3398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.809126][ T3398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.924025][ T3398] bond0 (unregistering): Released all slaves [ 1141.826597][ T3398] hsr_slave_0: left promiscuous mode [ 1141.949427][ T3398] hsr_slave_1: left promiscuous mode [ 1142.552825][ T3398] veth1_macvtap: left promiscuous mode [ 1142.564593][ T3398] veth0_macvtap: left promiscuous mode [ 1142.600825][ T3398] veth1_vlan: left promiscuous mode [ 1142.623823][ T3398] veth0_vlan: left promiscuous mode [ 1162.595047][ T3398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.042707][ T3398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.491680][ T3398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.886670][ T3398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.810900][ T3398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.051224][ T3398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.314024][ T3398] bond0 (unregistering): Released all slaves [ 1188.220225][ T3398] hsr_slave_0: left promiscuous mode [ 1188.301866][ T3398] hsr_slave_1: left promiscuous mode [ 1188.659226][ T3398] veth1_macvtap: left promiscuous mode [ 1188.663079][ T3398] veth0_macvtap: left promiscuous mode [ 1188.684531][ T3398] veth1_vlan: left promiscuous mode [ 1188.694348][ T3398] veth0_vlan: left promiscuous mode [ 1257.410495][ T3553] veth0_vlan: entered promiscuous mode [ 1258.384440][ T3553] veth1_vlan: entered promiscuous mode [ 1261.374996][ T3553] veth0_macvtap: entered promiscuous mode [ 1261.793750][ T3553] veth1_macvtap: entered promiscuous mode [ 1264.944062][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.969794][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.992779][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.023725][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.139405][ T25] audit: type=1400 audit(1273.330:101): avc: denied { append } for pid=3741 comm="syz.2.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1276.647533][ T3561] veth0_vlan: entered promiscuous mode [ 1277.496191][ T3561] veth1_vlan: entered promiscuous mode [ 1280.895721][ T3561] veth0_macvtap: entered promiscuous mode [ 1281.400249][ T3561] veth1_macvtap: entered promiscuous mode [ 1284.239887][ T3410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.242126][ T3410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.281870][ T3410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.291211][ T3410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.652490][ T21] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.842576][ T21] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.666602][ T21] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.242092][ T21] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.905017][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.290297][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.539777][ T21] bond0 (unregistering): Released all slaves [ 1371.240482][ T21] hsr_slave_0: left promiscuous mode [ 1371.412892][ T21] hsr_slave_1: left promiscuous mode [ 1372.315040][ T21] veth1_macvtap: left promiscuous mode [ 1372.339597][ T21] veth0_macvtap: left promiscuous mode [ 1372.379749][ T21] veth1_vlan: left promiscuous mode [ 1372.389702][ T21] veth0_vlan: left promiscuous mode [ 1429.488462][ T25] audit: type=1400 audit(1428.640:102): avc: denied { setattr } for pid=3825 comm="syz.3.36" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1461.372222][ T3772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.663150][ T3772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.576118][ T3772] hsr_slave_0: entered promiscuous mode [ 1496.723705][ T3772] hsr_slave_1: entered promiscuous mode [ 1514.823260][ T3772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1515.215062][ T3772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1515.513221][ T3772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1515.919841][ T3772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1542.385352][ T3772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.964039][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.822555][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.601749][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.273395][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.230306][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.411700][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.535643][ T35] bond0 (unregistering): Released all slaves [ 1587.134140][ T35] hsr_slave_0: left promiscuous mode [ 1587.208423][ T35] hsr_slave_1: left promiscuous mode [ 1587.891857][ T35] veth1_macvtap: left promiscuous mode [ 1587.904004][ T35] veth0_macvtap: left promiscuous mode [ 1587.930561][ T35] veth1_vlan: left promiscuous mode [ 1587.953682][ T35] veth0_vlan: left promiscuous mode [ 1654.843781][ T3919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.030797][ T3919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.884989][ T3919] hsr_slave_0: entered promiscuous mode [ 1687.952679][ T3919] hsr_slave_1: entered promiscuous mode [ 1687.998531][ T3919] debugfs: 'hsr0' already exists in 'hsr' [ 1688.007814][ T3919] Cannot create hsr debugfs directory [ 1698.239212][ T3772] veth0_vlan: entered promiscuous mode [ 1699.853819][ T3772] veth1_vlan: entered promiscuous mode [ 1704.848334][ T3919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1705.275201][ T3919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1705.668656][ T3919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1706.002343][ T3772] veth0_macvtap: entered promiscuous mode [ 1706.263982][ T3919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1707.094007][ T3772] veth1_macvtap: entered promiscuous mode [ 1710.813767][ T21] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.825631][ T21] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.980688][ T21] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.999522][ T21] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.275114][ T3919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.930241][ T3919] veth0_vlan: entered promiscuous mode [ 1906.240765][ T3919] veth1_vlan: entered promiscuous mode [ 1910.409808][ T3919] veth0_macvtap: entered promiscuous mode [ 1911.241125][ T3919] veth1_macvtap: entered promiscuous mode [ 1916.465589][ T4155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.488972][ T4155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.533270][ T4155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.560343][ T4155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.274844][ T3926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.215963][ T3926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.336541][ T3926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.063746][ T3926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.874686][ T3926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2032.443269][ T3926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2033.011906][ T3926] bond0 (unregistering): Released all slaves [ 2036.200683][ T3926] hsr_slave_0: left promiscuous mode [ 2036.476489][ T3926] hsr_slave_1: left promiscuous mode [ 2037.261046][ T3926] veth1_macvtap: left promiscuous mode [ 2037.272177][ T3926] veth0_macvtap: left promiscuous mode [ 2037.289813][ T3926] veth1_vlan: left promiscuous mode [ 2037.328883][ T3926] veth0_vlan: left promiscuous mode [ 2068.262006][ T3401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.755389][ T3401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2071.251656][ T3401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.516475][ T3401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.936032][ T3401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2095.311439][ T3401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2095.556321][ T3401] bond0 (unregistering): Released all slaves [ 2097.782803][ T3401] hsr_slave_0: left promiscuous mode [ 2097.859239][ T3401] hsr_slave_1: left promiscuous mode [ 2098.434965][ T3401] veth1_macvtap: left promiscuous mode [ 2098.489812][ T3401] veth0_macvtap: left promiscuous mode [ 2098.518911][ T3401] veth1_vlan: left promiscuous mode [ 2098.523096][ T3401] veth0_vlan: left promiscuous mode [ 2162.014341][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2163.136029][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2164.309791][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2165.456668][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2192.732253][ T4194] hsr_slave_0: entered promiscuous mode [ 2192.814349][ T4194] hsr_slave_1: entered promiscuous mode [ 2195.774819][ T4201] hsr_slave_0: entered promiscuous mode [ 2195.866466][ T4201] hsr_slave_1: entered promiscuous mode [ 2195.940655][ T4201] debugfs: 'hsr0' already exists in 'hsr' [ 2195.948854][ T4201] Cannot create hsr debugfs directory [ 2213.913746][ T4194] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2214.703123][ T4194] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2215.562671][ T4194] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2216.194853][ T4194] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2223.744471][ T4201] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2224.342486][ T4201] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2224.825746][ T4201] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2225.391709][ T4201] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2251.444285][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2258.241058][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2412.999157][ T4194] veth0_vlan: entered promiscuous mode [ 2414.135194][ T4194] veth1_vlan: entered promiscuous mode [ 2419.139793][ T4201] veth0_vlan: entered promiscuous mode [ 2420.653592][ T4194] veth0_macvtap: entered promiscuous mode [ 2421.680956][ T4201] veth1_vlan: entered promiscuous mode [ 2422.021585][ T4194] veth1_macvtap: entered promiscuous mode [ 2428.075416][ T3647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.100852][ T3647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.155951][ T3926] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.584859][ T3926] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.175584][ T4201] veth0_macvtap: entered promiscuous mode [ 2430.423918][ T4201] veth1_macvtap: entered promiscuous mode [ 2436.190124][ T3325] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.193889][ T3325] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.203868][ T3325] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.301325][ T3325] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.298273][ T25] audit: type=1400 audit(2759.470:103): avc: denied { map } for pid=4611 comm="syz.7.91" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3362.633849][ T21] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3365.655278][ T21] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3367.851989][ T21] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3370.466560][ T21] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3401.922951][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3402.161468][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3402.329005][ T21] bond0 (unregistering): Released all slaves [ 3406.509245][ T21] hsr_slave_0: left promiscuous mode [ 3406.900213][ T21] hsr_slave_1: left promiscuous mode [ 3408.190033][ T21] veth1_macvtap: left promiscuous mode [ 3408.208340][ T21] veth0_macvtap: left promiscuous mode [ 3408.210520][ T21] veth1_vlan: left promiscuous mode [ 3408.211940][ T21] veth0_vlan: left promiscuous mode [ 3463.262273][ T21] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3465.134677][ T21] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3467.263398][ T21] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3471.558416][ T21] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3499.905811][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3500.649342][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3501.969283][ T21] bond0 (unregistering): Released all slaves [ 3505.069731][ T21] hsr_slave_0: left promiscuous mode [ 3505.315966][ T21] hsr_slave_1: left promiscuous mode [ 3506.143858][ T21] veth1_macvtap: left promiscuous mode [ 3506.178955][ T21] veth0_macvtap: left promiscuous mode [ 3506.196642][ T21] veth1_vlan: left promiscuous mode [ 3506.221711][ T21] veth0_vlan: left promiscuous mode [ 3557.172617][ T4905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3557.563998][ T4905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3584.090498][ T4945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3584.512967][ T4945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3593.384692][ T4905] hsr_slave_0: entered promiscuous mode [ 3593.553734][ T4905] hsr_slave_1: entered promiscuous mode [ 3618.580407][ T4905] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3619.230996][ T4905] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3619.968811][ T4905] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3620.542803][ T4905] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3628.666357][ T4945] hsr_slave_0: entered promiscuous mode [ 3628.822698][ T4945] hsr_slave_1: entered promiscuous mode [ 3628.930711][ T4945] debugfs: 'hsr0' already exists in 'hsr' [ 3628.932622][ T4945] Cannot create hsr debugfs directory [ 3652.193508][ T4945] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3653.079911][ T4945] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3654.064608][ T4945] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3654.536479][ T4945] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3661.312629][ T4905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3697.864859][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3842.702309][ T4905] veth0_vlan: entered promiscuous mode [ 3844.134431][ T4905] veth1_vlan: entered promiscuous mode [ 3849.811100][ T4905] veth0_macvtap: entered promiscuous mode [ 3850.596341][ T4905] veth1_macvtap: entered promiscuous mode [ 3855.698821][ T4212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3855.726205][ T4212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3855.847895][ T4212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3855.850503][ T4212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3887.853544][ T4945] veth0_vlan: entered promiscuous mode [ 3889.295694][ T4945] veth1_vlan: entered promiscuous mode [ 3894.133204][ T4945] veth0_macvtap: entered promiscuous mode [ 3895.173432][ T4945] veth1_macvtap: entered promiscuous mode [ 3901.101548][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3901.103914][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3901.158733][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3901.159824][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4004.835966][ T25] audit: type=1400 audit(4004.050:104): avc: denied { execute } for pid=5228 comm="syz.8.161" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 4301.991589][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4302.671010][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4328.489410][ T5294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4329.175987][ T5294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4369.095604][ T5284] hsr_slave_0: entered promiscuous mode [ 4369.353101][ T5284] hsr_slave_1: entered promiscuous mode [ 4369.513851][ T5284] debugfs: 'hsr0' already exists in 'hsr' [ 4369.549103][ T5284] Cannot create hsr debugfs directory [ 4402.292590][ T5294] hsr_slave_0: entered promiscuous mode [ 4402.396495][ T5294] hsr_slave_1: entered promiscuous mode [ 4402.595094][ T5294] debugfs: 'hsr0' already exists in 'hsr' [ 4402.662548][ T5294] Cannot create hsr debugfs directory [ 4439.485942][ T5284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4443.329909][ T5284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4444.488886][ T5284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4448.661943][ T5284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4470.941266][ T5294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4471.656467][ T5294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4472.422728][ T5294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4473.193720][ T5294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4510.114283][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4527.913420][ T5294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4558.061293][ T27] INFO: task syz.8.171:5274 blocked for more than 430 seconds. [ 4558.132601][ T27] Not tainted syzkaller #0 [ 4558.139784][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 4558.140380][ T27] task:syz.8.171 state:D stack:0 pid:5274 tgid:5274 ppid:4905 task_flags:0x400040 flags:0x00000019 [ 4558.141879][ T27] Call trace: [ 4558.142429][ T27] __switch_to+0x584/0xb20 (T) [ 4558.144460][ T27] __schedule+0x1eec/0x33a4 [ 4558.145051][ T27] schedule+0xac/0x27c [ 4558.145562][ T27] schedule_timeout+0x5c/0x1e4 [ 4558.145979][ T27] do_wait_for_common+0x28c/0x444 [ 4558.146490][ T27] wait_for_completion+0x44/0x5c [ 4558.281114][ T27] __synchronize_srcu+0x2a4/0x320 [ 4558.281776][ T27] synchronize_srcu+0x3cc/0x4f0 [ 4558.282247][ T27] mmu_notifier_unregister+0x320/0x42c [ 4558.282759][ T27] kvm_put_kvm+0x6a0/0xfa8 [ 4558.283161][ T27] kvm_vm_release+0x58/0x78 [ 4558.283637][ T27] __fput+0x4ac/0x980 [ 4558.284060][ T27] ____fput+0x20/0x58 [ 4558.284500][ T27] task_work_run+0x1bc/0x254 [ 4558.284910][ T27] do_notify_resume+0x1bc/0x270 [ 4558.285393][ T27] el0_svc+0xb8/0x164 [ 4558.285814][ T27] el0t_64_sync_handler+0x84/0x12c [ 4558.286219][ T27] el0t_64_sync+0x198/0x19c [ 4558.370251][ T27] [ 4558.370251][ T27] Showing all locks held in the system: [ 4558.378944][ T27] 2 locks held by kworker/u4:0/12: [ 4558.379637][ T27] 1 lock held by khungtaskd/27: [ 4558.380013][ T27] #0: ffff800087806858 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 4558.382405][ T27] 1 lock held by syslogd/3109: [ 4558.382763][ T27] 2 locks held by getty/3178: [ 4558.383078][ T27] #0: e9f000001214a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 4558.384706][ T27] #1: 28ff80008c54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8 [ 4558.386366][ T27] 2 locks held by syz-executor/3309: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4558.540316][ T27] 3 locks held by kworker/u4:4/3325: [ 4558.541054][ T27] 3 locks held by kworker/u4:9/3647: [ 4558.541476][ T27] 3 locks held by kworker/u4:11/3926: [ 4558.541819][ T27] 3 locks held by kworker/u4:13/4215: [ 4558.542169][ T27] 2 locks held by kworker/u4:8/4921: [ 4558.542494][ T27] #0: b8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 4558.544225][ T27] #1: ffff80008ce37c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 4558.545968][ T27] 3 locks held by kworker/u4:14/4927: [ 4558.546310][ T27] 3 locks held by kworker/u4:15/5101: [ 4558.546651][ T27] 2 locks held by syz.9.170/5272: [ 4558.700625][ T27] 2 locks held by syz-executor/5284: [ 4558.701092][ T27] 3 locks held by kworker/u4:1/5306: [ 4558.701471][ T27] 2 locks held by kworker/u4:7/5358: [ 4558.701784][ T27] #0: b8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 4558.703540][ T27] #1: ffff8000a0f07c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 4558.705309][ T27] 1 lock held by modprobe/5446: [ 4558.758533][ T27] [ 4558.759116][ T27] ============================================= [ 4558.759116][ T27] [ 4558.759971][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 4558.764987][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 4558.766567][ T27] Hardware name: linux,dummy-virt (DT) [ 4558.767586][ T27] Call trace: [ 4558.768414][ T27] show_stack+0x2c/0x3c (C) [ 4558.769485][ T27] __dump_stack+0x30/0x40 [ 4558.770367][ T27] dump_stack_lvl+0x30/0x12c [ 4558.771275][ T27] dump_stack+0x1c/0x28 [ 4558.772141][ T27] vpanic+0x22c/0x59c [ 4558.773017][ T27] vpanic+0x0/0x59c [ 4558.773859][ T27] hung_task_panic+0x0/0x2c [ 4558.774755][ T27] kthread+0x794/0x9a0 [ 4558.775649][ T27] ret_from_fork+0x10/0x20 [ 4558.777512][ T27] Kernel Offset: disabled [ 4558.778285][ T27] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 4558.779490][ T27] Memory Limit: none [ 4558.781810][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:42:51 Registers: info registers vcpu 0 CPU#0 PC=ffff800085bcb0bc X00=c0f0000015dd0c80 X01=0000000000000000 X02=ffff8000800076a8 X03=0000000000000001 X04=0000000000000000 X05=0000000000000000 X06=0000000000000000 X07=ffff8000859f53fc X08=ddf0000024dc3b00 X09=00000000000000dd X10=ffff800087807530 X11=00000000000000fe X12=ddf0000024dc45b0 X13=00000000000000dd X14=0000000000002000 X15=ffff800080007680 X16=ffff800080010e20 X17=00000000000000c8 X18=00000000000000ff X19=efff800000000000 X20=c0f0000015dd0c80 X21=ffff8000800076a8 X22=0000000000000001 X23=7ef0000010dec108 X24=c0f0000015dd0c97 X25=00000000000000c0 X26=68f0000011739200 X27=0000000000000000 X28=5cf0000012b82700 X29=ffff8000800074f0 X30=ffff800085bca7b0 SP=ffff800080007540 PSTATE=40402009 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=637062696c2f3436:62696c2f7273752f Z01=00302e6f732e382d:326572637062696c Z02=0000000000000000:ffffff0000000000 Z03=0000000000000000:0000000000000000 Z04=3333333333333333:3333333333333333 Z05=0000000000000000:0000c000000000c0 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000