last executing test programs: 1h31m23.3282434s ago: executing program 1 (id=11): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffb}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = eventfd2(0x5, 0x800) write$eventfd(r5, &(0x7f0000000000)=0xffffffffffffffff, 0x8) 1h31m12.52308223s ago: executing program 1 (id=13): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f0000000200)={{0xffff1000, 0x0, 0xc, 0x0, 0x10, 0x1, 0xa, 0xf, 0xb5, 0x81, 0x7, 0xf}, {0x1000, 0x8010000, 0xb, 0x5, 0x2, 0x80, 0x5, 0x81, 0x8, 0x6, 0xb, 0x6}, {0xd000, 0xf000, 0xf, 0x2d, 0x6, 0x5, 0x6, 0x1, 0x5, 0x4, 0x3, 0xb8}, {0x1000, 0x8080000, 0xb, 0x9, 0x0, 0x0, 0xfe, 0x3, 0x3d, 0x1, 0xff, 0x8}, {0xdddd1000, 0xffff1000, 0x0, 0x9, 0xf, 0x4, 0xf, 0x5, 0x3, 0x8, 0xa, 0x2}, {0x8000000, 0x3000, 0x8, 0xc, 0x7f, 0x8, 0x1, 0x50, 0xd8, 0x10, 0x3, 0x3}, {0xeeee1001, 0xf000, 0x0, 0x38, 0x8, 0x0, 0x2, 0x6, 0x6, 0x7, 0x3, 0x82}, {0x10000, 0xe6e76000, 0x8, 0xf4, 0x8, 0xe, 0xf5, 0x4, 0x18, 0x4e, 0x5, 0x3}, {0x2000}, {0x5000, 0xab81}, 0x4001c, 0x0, 0x8080000, 0x404002, 0x0, 0x8001, 0x6000, [0x2ae7, 0xf5, 0x4, 0x3]}) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f00000001c0), 0xd40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x3, 0x3, 0x0}) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_CAP_ARM_MTE(r2, 0x4068aea3, &(0x7f0000000000)) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x7fff, 0x8fb, &(0x7f0000000080)=0x1}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 1h31m3.00264348s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) 1h30m17.711909783s ago: executing program 32 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) 53m15.029876277s ago: executing program 2 (id=375): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0x40086602, 0x110e22ffff) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) r4 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r4, &(0x7f0000000200)=0x8, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r7, 0x2}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x4, 0xd000, 0x8, r7, 0x1}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r7, 0x7ffffffe}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x20000000) ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110e227ffe) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x28) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$arm64(r9, r11, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/616], 0x25c}], 0x1, 0x0, 0x0, 0x0) 52m57.953399414s ago: executing program 2 (id=379): mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async, rerun: 32) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0xb, 0x11, r2, 0x0) (async) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x4, 0x1}) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000006000/0x4000)=nil, 0x930, 0x2, 0x40010, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r9, 0x2000003, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r9, 0x2000009, 0x11, r7, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) 52m51.946829466s ago: executing program 2 (id=380): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x145541, 0x0) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3b) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$arm64(r5, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000480)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff0, 0xa94}}, @msr={0x14, 0x20, {0x603000000013801a}}, @smc={0x1e, 0x40, {0x40, [0x3, 0x3, 0x1, 0x3, 0x6]}}, @memwrite={0x6e, 0x30, @generic={0x1, 0x83e, 0x1}}, @hvc={0x32, 0x40, {0x84000006, [0xffffffffffffff32, 0x100, 0x2, 0x6c, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013c100}}, @mrs={0xbe, 0x18, {0x603000000013df55}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x8, 0x401, 0x2, 0x3}}, @uexit={0x0, 0x18, 0x8000000000000001}], 0x170}], 0x1, 0x0, &(0x7f00000001c0)=[@featur1={0x1, 0x31}], 0x1) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x3, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_assert_reg(r7, 0x603000000013dce8, 0x8000) 52m49.622477159s ago: executing program 0 (id=381): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x8, 0x4, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c17000/0x3000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x20) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000b00)=@attr_other={0x0, 0x0, 0x2, 0x0}) 52m40.035249439s ago: executing program 0 (id=382): munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x0, 0xe0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0x3ff, 0x8000, &(0x7f0000000000)=0x5}) (async) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013c298}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 52m20.622174662s ago: executing program 0 (id=383): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 32) r4 = openat$kvm(0x0, &(0x7f0000000280), 0x414000, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000240)=@arm64_fp={0x6040000000100048, 0x0}) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = mmap$KVM_VCPU(&(0x7f0000ea5000/0x2000)=nil, 0x0, 0x1, 0x8010, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="ce2f822f54ae123d804ff50b9f3c1c31c87bb77a9d790d3f31563e678459d8c1b2e34ab4a750fd5a5a94ef482768a38a05d2b44e68cc71e32cc35ae7caddb794cc4d323c75fbdc0c", 0x0, 0x48) (async) r13 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r14, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) (async) r15 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r15, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000e9d000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x8) (async, rerun: 64) r16 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x21) (rerun: 64) syz_kvm_vgic_v3_setup(r16, 0x3, 0x80) (async) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bfe000/0x400000)=nil) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1}) (rerun: 64) 52m18.548842607s ago: executing program 2 (id=384): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r7 = ioctl$KVM_CREATE_VM(r6, 0x894c, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0x8004b707, 0x0) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x7}) 52m11.491320051s ago: executing program 0 (id=385): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_arm64(r5, 0x4208ae9b, &(0x7f0000000280)={0x20002, 0x0, {[0x4e, 0x3, 0x271, 0x9, 0xf, 0x28a07d71, 0x5, 0x2, 0x4000000002, 0x1000, 0x1, 0xf63, 0x2, 0x3, 0x7fffffff, 0x66d], [0x63f, 0x0, 0x3ff, 0x3, 0x8001, 0x7, 0x80000001, 0x6, 0x5, 0x4, 0x96, 0x4, 0x10000, 0x0, 0x2c, 0xffffffff], [0xfa93, 0x200, 0x4, 0x3, 0xbf7, 0x7, 0x1, 0x3, 0x2, 0x4, 0x0, 0xf, 0x3, 0x7ff, 0xb1c, 0xe0], [0x0, 0x7, 0x44, 0x3ff, 0x9, 0x5, 0xfff, 0x3, 0x5, 0x1000, 0x6, 0x100000000, 0x4, 0x8f81, 0x2, 0x8]}}) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x2, 0x100) r11 = eventfd2(0x1, 0x80001) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r11, 0x3}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) 52m10.140604077s ago: executing program 2 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x6, 0x2, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) syz_kvm_vgic_v3_setup(r5, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000005c0)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f0000000580)=0x10001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x19) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 52m0.082365404s ago: executing program 2 (id=387): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x8000000400000004) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_assert_reg(r8, 0x603000000013df11, 0x8000) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x10, [0x3ff, 0xfff, 0x4ce6, 0x4, 0x4]}}, @eret={0xe6, 0x18, 0x2}, @its_send_cmd={0xaa, 0x28, {0xc, 0x6, 0x0, 0xc, 0xc, 0x8000, 0x3}}], 0x80}, &(0x7f0000000380)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 51m58.858555376s ago: executing program 0 (id=388): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0x1, 0x2012, r7, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x2000001, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x0) 51m48.217770405s ago: executing program 0 (id=389): openat$kvm(0x0, &(0x7f0000000000), 0x72483, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2, 0x20000013) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100016, &(0x7f0000000100)=0xc5c5}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100018, &(0x7f0000000100)=0xffffffffffffffff}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f00000000c0)=0x1}) ioctl$KVM_GET_SREGS(r11, 0x8000ae83, &(0x7f0000000140)) ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f00000000c0)) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 51m13.47237875s ago: executing program 33 (id=387): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}}], 0x50}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x8000000400000004) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x0, &(0x7f0000000000)=0x10}) r7 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) syz_kvm_assert_reg(r8, 0x603000000013df11, 0x8000) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x84000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000340)={0x0, &(0x7f0000000240)=[@hvc={0x32, 0x40, {0x10, [0x3ff, 0xfff, 0x4ce6, 0x4, 0x4]}}, @eret={0xe6, 0x18, 0x2}, @its_send_cmd={0xaa, 0x28, {0xc, 0x6, 0x0, 0xc, 0xc, 0x8000, 0x3}}], 0x80}, &(0x7f0000000380)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 51m1.640195142s ago: executing program 34 (id=389): openat$kvm(0x0, &(0x7f0000000000), 0x72483, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2, 0x20000013) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100016, &(0x7f0000000100)=0xc5c5}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100018, &(0x7f0000000100)=0xffffffffffffffff}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f00000000c0)=0x1}) ioctl$KVM_GET_SREGS(r11, 0x8000ae83, &(0x7f0000000140)) ioctl$KVM_ARM_PREFERRED_TARGET(r3, 0x8020aeaf, &(0x7f00000000c0)) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 42m34.811115639s ago: executing program 3 (id=415): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0xffff1000, 0x1000, &(0x7f00003f1000/0x1000)=nil}) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x603000000010001a, &(0x7f00000001c0)=0x8}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r10, 0x400454cd, 0x1) r11 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, &(0x7f0000000000)={0x0, 0x380, 0x180, &(0x7f0000000180)=[0x1, 0x200, 0x2da, 0x1, 0xffffffff, 0x1, 0x4860, 0x9, 0x5, 0x5, 0xb, 0x6, 0xd30, 0x0, 0x8a6f, 0xfffffffffffffff9, 0x7, 0x9, 0x581c, 0x6, 0x9, 0x4, 0x7, 0x3, 0x9, 0xffffffffffffb388, 0x68799d9f, 0xe, 0xf, 0x0, 0x7, 0x7fffffff, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x7fffffff, 0x80000001, 0xa, 0xffffffff, 0x2, 0x2, 0x5, 0x1, 0x6, 0x7, 0x9, 0x7f, 0x9, 0x2, 0xc190, 0x7, 0x40, 0xfa9c, 0x7, 0x7, 0x2, 0x9, 0x7, 0x6, 0x2, 0x4, 0x1, 0x3, 0xffff, 0x3, 0xffffffffffffffed, 0x0, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x314, 0x0, 0x1, 0xac, 0x7, 0x3, 0x6, 0x2, 0x5, 0x401, 0xfc6f, 0x40, 0x8000, 0x8001, 0x1, 0x0, 0x3, 0x7fffffff, 0x1, 0xfff, 0x3, 0x9, 0x0, 0x1af4039, 0x3, 0xffc1, 0x600, 0x63f000000000000, 0x1cb, 0x36eb, 0x5, 0x2, 0x0, 0x4, 0x9, 0x0, 0x4, 0x4, 0x9, 0x8000, 0x180000000000000, 0x1, 0x6, 0x5, 0x7, 0x830, 0x3, 0x4, 0xce1, 0x10, 0x0, 0xfffffffffffffff7, 0x2]}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) 42m8.410673082s ago: executing program 3 (id=417): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0x4000000, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1600, 0x6, 0x1}}, @irq_setup={0x46, 0x18, {0x4, 0xd2}}, @irq_setup={0x46, 0x18, {0x1, 0x22e}}, @code={0xa, 0x84, {"0080206e0038205e404691d20000b8f2410080d2820180d2a30180d2c40080d2020000d4e0bf89d20000b8f2810080d2420080d2630080d2440180d2020000d400004028008008d5803181d20060b8f2010180d2e20080d2830180d2c40080d2020000d4000008d5000028d500004038"}}, @svc={0x122, 0x40, {0x8, [0x9, 0x2, 0x3, 0x2, 0x2]}}, @msr={0x14, 0x20, {0x603000000013c090, 0x4}}, @code={0xa, 0x6c, {"000040d30040000d007008d5000880b8000028d500db8cd200e0b8f2010080d2c20180d2030180d2c40080d2020000d4000028d540a381d200e0b8f2c10180d2e20180d2c30180d2440080d2020000d40000000b00000092"}}, @smc={0x1e, 0x40, {0x40, [0x3fc000, 0x5a19, 0x1, 0x101]}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x292}}, @smc={0x1e, 0x40, {0xc4000012, [0xb, 0xfffffffffffffffd, 0xb113, 0x9, 0x401]}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x5f}}, @msr={0x14, 0x20, {0x603000000013c014, 0x5}}], 0x2a0}, &(0x7f0000000040)=[@featur1={0x1, 0x80}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x125b02, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42m6.114821802s ago: executing program 4 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x2, 0x9d}}, @code={0xa, 0x9c, {"409599d200a0b0f2010180d2620080d2030080d2640180d2020000d460a380d200a0b8f2210080d2020180d2830080d2240180d2020000d40000000c40eb92d200a0b0f2410180d2020080d2630180d2840180d2020000d4000c40b80048216e000008d5a0d99bd20080b8f2610180d2e20080d2a30180d2a40180d2007008d500d0204e007008d5"}}, @hvc={0x32, 0x40, {0x100, [0x2, 0x5, 0xc, 0x800, 0x8]}}, @eret={0xe6, 0x18, 0x4}, @its_setup={0x82, 0x28, {0x1, 0x6, 0x332}}], 0x134}, &(0x7f0000000280)=[@featur1={0x1, 0x93}], 0x1) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000b9e000/0x400000)=nil, &(0x7f0000000600)=[{0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x328}], 0x1, 0x0, &(0x7f0000000640)=[@featur1={0x1, 0x80}], 0x1) r3 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000007c0)=@arm64_fw={0x6030000000140001, &(0x7f0000000780)=0x9}) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f0000000040)=[@hvc={0x32, 0x40, {0xc4000004, [0x400000000000007, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur2={0x1, 0x48}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r7 = mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r6, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0x40086602, 0x110e22ffff) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, r0, 0x0) r10 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r10, &(0x7f0000000200)=0x8, 0x8) syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x20, &(0x7f00000000c0)="37d31124e60000009400000000000000000000005100", 0x0, 0x18) ioctl$KVM_CREATE_VM(r8, 0x40086602, 0x37) ioctl$KVM_CHECK_EXTENSION(r9, 0x40086602, 0x110e227ffe) mmap$KVM_VCPU(&(0x7f0000bc5000/0x1000)=nil, 0x930, 0xe, 0x810, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) 41m52.390345637s ago: executing program 3 (id=419): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) r2 = mmap$KVM_VCPU(&(0x7f000003b000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000000000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) syz_kvm_vgic_v3_setup(r3, 0x1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async) close(r1) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f00001b3000/0x1000)=nil, r4, 0x0, 0x110, 0xffffffffffffffff, 0x0) 41m49.642334364s ago: executing program 4 (id=420): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="46000000006c89ec72a9aedc0000001800000000000000fdffff6339040000"], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41m40.21572727s ago: executing program 3 (id=421): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000240)=@arm64_fp={0x6040000000100048, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r3, 0x4208ae9b, &(0x7f00000001c0)={0x10002, 0x0, {[0x101, 0x7ff00000, 0x2, 0x7fff, 0x9, 0x8000000000000000, 0x6, 0x7, 0xc4, 0x0, 0x2, 0x7, 0x7fff, 0x9, 0x2, 0x9], [0x7fff, 0x4, 0x5e, 0x1, 0x4000000000000000, 0xffffffff00000000, 0xfffffffffffffff9, 0x3, 0xc, 0x5, 0x5, 0x9, 0x9, 0x6, 0x8, 0x8001], [0xfffffffffffffffa, 0x4, 0x1bf, 0x4, 0x1, 0x8, 0x8, 0x8d, 0xd4, 0x7, 0x4, 0x0, 0x100000001, 0x0, 0x10000, 0x8], [0x7, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x40, 0x100, 0x7, 0xd, 0x8, 0x2, 0x8, 0xfffffffffffffc01, 0xfffffffffffffffa, 0x40, 0x1, 0xfffffffffffffffd, 0x3]}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x29) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) r13 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r17, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f00000000c0)=0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3f, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r5, r18, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=[@hvc={0x32, 0x40, {0x84000007, [0x60e, 0xfffffffffffffffb, 0x4, 0x8, 0x1]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r18, 0xae80, 0x0) 41m35.339516739s ago: executing program 4 (id=422): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x603000000010001e, &(0x7f0000000000)=0x5}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c024, &(0x7f00000000c0)}) 41m20.321020829s ago: executing program 4 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000140)=@arm64_core={0x6030000000100010, &(0x7f0000000100)=0x2}) r6 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x100, 0x6243, 0x1}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x80001, 0x211aa84e087b1ccd) ioctl$KVM_RUN(r7, 0xae80, 0x0) 41m18.209261009s ago: executing program 3 (id=424): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) (async) r1 = eventfd2(0x5, 0x0) (async) r2 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r1, 0x7, 0x3, r2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x11104005, 0x14000}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000080)={0x1, 0x4000, 0x1}) (async) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x3, 0x8}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000000100)={0x80000001, 0xfffffffffffffff7}) (async, rerun: 64) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000000140)) (rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r6, 0x4020aeae, &(0x7f0000000180)={0x1, 0x20}) r7 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000780)={0x0, &(0x7f00000001c0)=[@mrs={0xbe, 0x18, {0x6030000000138014}}, @eret={0xe6, 0x18, 0x9}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff8, 0x1, 0x4}}, @eret={0xe6, 0x18, 0x6}, @uexit={0x0, 0x18}, @memwrite={0x6e, 0x30, @generic={0xeeee0000, 0xe8d, 0x3ff, 0xf}}, @eret={0xe6, 0x18, 0xe5e}, @uexit={0x0, 0x18, 0x8001}, @eret={0xe6, 0x18}, @eret={0xe6, 0x18, 0x9}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x380, 0x7}}, @smc={0x1e, 0x40, {0x8, [0x10, 0x8001, 0x0, 0x7, 0x9]}}, @msr={0x14, 0x20, {0x603000000013e6d2, 0x6c6}}, @svc={0x122, 0x40, {0xc4000003, [0x2, 0x1, 0xfffe000000000, 0xd6a1, 0x41d]}}, @svc={0x122, 0x40, {0x84000012, [0xfffffffffffffffd, 0x9, 0x6, 0x14000000, 0x102b]}}, @mrs={0xbe, 0x18, {0x603000000013c2aa}}, @code={0xa, 0x6c, {"008008d5007008d5000008d5204b9ad20060b8f2810180d2620180d2030180d2440080d2020000d40000669e000028d50008607c00008079007008d5c08a80d20000b8f2010180d2a20080d2a30180d2e40180d2020000d4"}}, @code={0xa, 0x84, {"c09985d200e0b8f2a10080d2620080d2430180d2040080d2020000d400c0671e0014200e007008d5000c8078007008d5409882d20000b0f2610180d2820180d2030080d2840080d2020000d40020c00d008008d5000395d20060b8f2810180d2420180d2030080d2440080d2020000d4"}}, @code={0xa, 0x84, {"007008d5e06f91d20040b8f2e10180d2a20080d2030080d2a40180d2020000d4402f88d200c0b8f2610080d2220180d2630180d2040080d2020000d4007008d5001590d200a0b0f2210080d2220080d2e30180d2c40180d2020000d4000400b8000008d5003c004e007008d51f0000eb"}}, @msr={0x14, 0x20, {0x603000000013e518}}, @msr={0x14, 0x20, {0x603000000013c527, 0x8}}, @svc={0x122, 0x40, {0x4000, [0x6, 0x6, 0x4, 0x2000000000000000, 0x8001]}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x237}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x36c}}, @svc={0x122, 0x40, {0x86000000, [0x6, 0x9, 0x7fff, 0x7fffffffffffffff, 0x2]}}, @mrs={0xbe, 0x18}, @msr={0x14, 0x20, {0x603000000013e534, 0x2}}, @mrs={0xbe, 0x18, {0x50280000001a34fc}}, @irq_setup={0x46, 0x18, {0x3, 0x33f}}, @hvc={0x32, 0x40, {0x80000000, [0x6, 0xe6, 0x5, 0x9, 0xcc]}}, @mrs={0xbe, 0x18, {0x603000000013802f}}], 0x58c}, &(0x7f00000007c0)=[@featur2={0x1, 0x12}], 0x1) r8 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000800)={0xa8, 0x0, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000880)={0x6}) (async) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000008c0)={0xd, 0x7fff}) (async, rerun: 64) close(r0) (async, rerun: 64) ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) (async, rerun: 32) syz_kvm_vgic_v3_setup(r4, 0x2, 0x100) (async, rerun: 32) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000c00)={0x0, &(0x7f0000000900)=[@its_setup={0x82, 0x28, {0x2, 0x0, 0x277}}, @uexit={0x0, 0x18, 0xe54c}, @mrs={0xbe, 0x18, {0x586}}, @msr={0x14, 0x20, {0x603000000013c02d, 0x4}}, @irq_setup={0x46, 0x18, {0x3, 0x36e}}, @irq_setup={0x46, 0x18, {0x0, 0x2cb}}, @msr={0x14, 0x20, {0x603000000013e681, 0x9}}, @msr={0x14, 0x20, {0x603000000013c016, 0x2}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x300, 0x1, 0x4}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x18e}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x0, 0xe, 0xacf8, 0x7fffffff, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x299}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x48, 0x9, 0xc}}, @irq_setup={0x46, 0x18, {0x4, 0x3a9}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x3, 0xc, 0xfffffffc, 0xfff, 0x1}}, @uexit={0x0, 0x18, 0xa8}, @eret={0xe6, 0x18}, @irq_setup={0x46, 0x18, {0x3, 0x47}}, @msr={0x14, 0x20, {0xa050000000341fb2, 0x80000001}}, @uexit={0x0, 0x18, 0xfffffffffffffbff}, @mrs={0xbe, 0x18, {0x603000000013c118}}, @smc={0x1e, 0x40, {0xc400000e, [0xfffffffffffffffc, 0x7, 0xffffffffffffffff, 0x6, 0x4]}}], 0x2d8}, &(0x7f0000000c40)=[@featur1={0x1, 0x1}], 0x1) (async) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000c80)=0x8) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000d00)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x7, 0x1}}) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000d40)={0x0, 0x200}) 41m7.851492571s ago: executing program 3 (id=425): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xec82c1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xec82c1, 0x0) ioctl$KVM_CREATE_VM(r3, 0x80086601, 0x20000000) (async) ioctl$KVM_CREATE_VM(r3, 0x80086601, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffd) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000012, [0x8, 0x939, 0xe, 0x7f, 0xd]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000012, [0x8, 0x939, 0xe, 0x7f, 0xd]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1) ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, &(0x7f00000004c0)={0x10001, 0x0, {[0x200, 0xfffffffffffffff8, 0x3, 0x4, 0x2ae, 0x9, 0x5, 0x9, 0xc, 0xfffffffffffffffb, 0x8, 0x70, 0x4, 0x24, 0x1, 0x3], [0x4, 0x9, 0x0, 0x80000000, 0x7, 0x6, 0x7ff, 0x4, 0x6, 0xc1e, 0x202d, 0x401, 0x8000000000000000, 0x4, 0x5, 0x900000], [0x1, 0x9698, 0x100000000, 0x7, 0x3, 0xc1, 0x7fff, 0x0, 0x9, 0x8000, 0x5, 0xc, 0x4, 0x5, 0xffffffff, 0x47], [0x9, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x5, 0xe93, 0x7, 0x7, 0xfffffffffffffff7, 0x4, 0x0, 0xfffffffffffff82d, 0x9, 0x6]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, &(0x7f00000004c0)={0x10001, 0x0, {[0x200, 0xfffffffffffffff8, 0x3, 0x4, 0x2ae, 0x9, 0x5, 0x9, 0xc, 0xfffffffffffffffb, 0x8, 0x70, 0x4, 0x24, 0x1, 0x3], [0x4, 0x9, 0x0, 0x80000000, 0x7, 0x6, 0x7ff, 0x4, 0x6, 0xc1e, 0x202d, 0x401, 0x8000000000000000, 0x4, 0x5, 0x900000], [0x1, 0x9698, 0x100000000, 0x7, 0x3, 0xc1, 0x7fff, 0x0, 0x9, 0x8000, 0x5, 0xc, 0x4, 0x5, 0xffffffff, 0x47], [0x9, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x5, 0xe93, 0x7, 0x7, 0xfffffffffffffff7, 0x4, 0x0, 0xfffffffffffff82d, 0x9, 0x6]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x7, 0xffffffffffff7fff, &(0x7f00000000c0)=0x80}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@memwrite={0x6e, 0x30, @generic={0x2, 0x10c, 0x2, 0x2}}, @uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013e6d6}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x196}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x6, 0x82, 0x8, 0x2}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013dee2, 0x4}}, @msr={0x14, 0x20, {0x6030000000130204, 0xfff}}, @hvc={0x32, 0x40, {0xf4000114, [0x1e, 0x1000, 0x100, 0x0, 0x10]}}, @uexit={0x0, 0x18, 0x7405}, @svc={0x122, 0x40, {0xc4000011, [0x7, 0x5c6d, 0xfff, 0x8, 0x19aa]}}, @msr={0x14, 0x20, {0x6030000000138024, 0x80000000}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x2, 0x3e, 0x0, 0x3}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x2e2}}, @svc={0x122, 0x40, {0xc4000005, [0x400, 0xd6ab, 0x8000000000, 0x8001, 0x9]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x38f}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0x9f1, 0x0, 0x8}}], 0x2a8}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r11, 0xc0189436, 0x20004000) r12 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0x86000001, [0xc, 0x5, 0x2, 0xfffffffffffffffc, 0x52]}}], 0xffffffb5}, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r12, 0xae80, 0x0) 41m6.257713497s ago: executing program 4 (id=426): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000000)=[@eret={0xe6, 0x18, 0x4}, @code={0xa, 0x9c, {"000c403820e386d20020b0f2410180d2c20080d2430180d2840080d2020000d4805589d20020b0f2210180d2820080d2a30080d2440080d2020000d460288bd20040b0f2010180d2020180d2230080d2040080d2020000d40004002f000000cb00b0205e007008d5c04b92d20020b8f2a10180d2620180d2430180d2840080d2020000d40038202e"}}, @its_setup={0x82, 0x28, {0x1, 0x3, 0x14d}}, @uexit={0x0, 0x18, 0xffffffff}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0xa0, 0x9, 0x8}}, @msr={0x14, 0x20, {0x603000000013df5c, 0x2}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x199}}, @irq_setup={0x46, 0x18, {0x2, 0x35e}}, @msr={0x14, 0x20, {0x603000000013c681, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0x2}, @hvc={0x32, 0x40, {0x84000011, [0x7fffffff, 0x8, 0x7, 0x37f, 0x120000000]}}, @uexit={0x0, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x2, 0x7, 0x80, 0xfffffffd, 0x4}}, @smc={0x1e, 0x40, {0x200, [0xfffffffffffffffe, 0x8000000000000000, 0xd, 0xd, 0x2e21]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0xa6e, 0xb}}, @mrs={0xbe, 0x18, {0x603000000013de83}}, @hvc={0x32, 0x40, {0xc4000010, [0xd, 0x0, 0x3f25, 0x1]}}, @mrs={0xbe, 0x18, {0x603000000013802c}}, @code={0xa, 0xb4, {"40c394d200a0b8f2010180d2c20180d2e30180d2a40080d2020000d4007008d5007008d5000008d580f785d20000b0f2210180d2820180d2230080d2240180d2020000d4807284d20080b8f2a10080d2420080d2430080d2840180d2020000d440ed98d20020b8f2410180d2620080d2030180d2840180d2020000d480a59dd20080b8f2a10080d2420080d2c30080d2440080d2020000d4000840ba008008d5"}}, @uexit={0x0, 0x18, 0x10001}, @irq_setup={0x46, 0x18, {0x1, 0x2d}}], 0x400}, &(0x7f0000000480)=[@featur1={0x1, 0x4}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b656592f1, r0, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, 0xfffffffffffffffe) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[@mrs={0xbe, 0x18, {0x603000000013dce0}}], 0x18}, &(0x7f0000000000)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 40m57.185989445s ago: executing program 4 (id=427): r0 = openat$kvm(0x0, &(0x7f0000000180), 0xa0080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xa5) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f00009ab000/0x400000)=nil) r6 = eventfd2(0x3, 0x0) r7 = eventfd2(0xf94, 0x80001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x2, r7}) r8 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140002, &(0x7f00000000c0)=0x1}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_vgic_v3_setup(r9, 0x2, 0x100) close(r9) close(r10) 40m20.577432745s ago: executing program 35 (id=425): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xec82c1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xec82c1, 0x0) ioctl$KVM_CREATE_VM(r3, 0x80086601, 0x20000000) (async) ioctl$KVM_CREATE_VM(r3, 0x80086601, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffd) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000012, [0x8, 0x939, 0xe, 0x7f, 0xd]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000012, [0x8, 0x939, 0xe, 0x7f, 0xd]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1) ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, &(0x7f00000004c0)={0x10001, 0x0, {[0x200, 0xfffffffffffffff8, 0x3, 0x4, 0x2ae, 0x9, 0x5, 0x9, 0xc, 0xfffffffffffffffb, 0x8, 0x70, 0x4, 0x24, 0x1, 0x3], [0x4, 0x9, 0x0, 0x80000000, 0x7, 0x6, 0x7ff, 0x4, 0x6, 0xc1e, 0x202d, 0x401, 0x8000000000000000, 0x4, 0x5, 0x900000], [0x1, 0x9698, 0x100000000, 0x7, 0x3, 0xc1, 0x7fff, 0x0, 0x9, 0x8000, 0x5, 0xc, 0x4, 0x5, 0xffffffff, 0x47], [0x9, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x5, 0xe93, 0x7, 0x7, 0xfffffffffffffff7, 0x4, 0x0, 0xfffffffffffff82d, 0x9, 0x6]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_arm64(r6, 0x4208ae9b, &(0x7f00000004c0)={0x10001, 0x0, {[0x200, 0xfffffffffffffff8, 0x3, 0x4, 0x2ae, 0x9, 0x5, 0x9, 0xc, 0xfffffffffffffffb, 0x8, 0x70, 0x4, 0x24, 0x1, 0x3], [0x4, 0x9, 0x0, 0x80000000, 0x7, 0x6, 0x7ff, 0x4, 0x6, 0xc1e, 0x202d, 0x401, 0x8000000000000000, 0x4, 0x5, 0x900000], [0x1, 0x9698, 0x100000000, 0x7, 0x3, 0xc1, 0x7fff, 0x0, 0x9, 0x8000, 0x5, 0xc, 0x4, 0x5, 0xffffffff, 0x47], [0x9, 0x9, 0x80000000, 0x9, 0x8, 0x2, 0x5, 0xe93, 0x7, 0x7, 0xfffffffffffffff7, 0x4, 0x0, 0xfffffffffffff82d, 0x9, 0x6]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_kvm_vgic_v3_setup(r1, 0x4, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x7, 0xffffffffffff7fff, &(0x7f00000000c0)=0x80}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@memwrite={0x6e, 0x30, @generic={0x2, 0x10c, 0x2, 0x2}}, @uexit={0x0, 0x18, 0x3}, @mrs={0xbe, 0x18, {0x603000000013e6d6}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x196}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x6, 0x82, 0x8, 0x2}}, @eret={0xe6, 0x18}, @msr={0x14, 0x20, {0x603000000013dee2, 0x4}}, @msr={0x14, 0x20, {0x6030000000130204, 0xfff}}, @hvc={0x32, 0x40, {0xf4000114, [0x1e, 0x1000, 0x100, 0x0, 0x10]}}, @uexit={0x0, 0x18, 0x7405}, @svc={0x122, 0x40, {0xc4000011, [0x7, 0x5c6d, 0xfff, 0x8, 0x19aa]}}, @msr={0x14, 0x20, {0x6030000000138024, 0x80000000}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x2, 0x3e, 0x0, 0x3}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x2e2}}, @svc={0x122, 0x40, {0xc4000005, [0x400, 0xd6ab, 0x8000000000, 0x8001, 0x9]}}, @its_setup={0x82, 0x28, {0x3, 0x3, 0x38f}}, @memwrite={0x6e, 0x30, @generic={0xdddd0000, 0x9f1, 0x0, 0x8}}], 0x2a8}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r11, 0xc0189436, 0x20004000) r12 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0x86000001, [0xc, 0x5, 0x2, 0xfffffffffffffffc, 0x52]}}], 0xffffffb5}, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r12, 0xae80, 0x0) 40m8.281388587s ago: executing program 36 (id=427): r0 = openat$kvm(0x0, &(0x7f0000000180), 0xa0080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xa5) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f00009ab000/0x400000)=nil) r6 = eventfd2(0x3, 0x0) r7 = eventfd2(0xf94, 0x80001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x2, r7}) r8 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000100)=@arm64_fw={0x6030000000140002, &(0x7f00000000c0)=0x1}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_vgic_v3_setup(r9, 0x2, 0x100) close(r9) close(r10) 26m52.786803539s ago: executing program 6 (id=472): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) close(r1) 26m38.352065423s ago: executing program 5 (id=473): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xc5000020, [0x0, 0x1, 0x2, 0x3, 0x4]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r5, r7, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) r8 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x1, &(0x7f0000000000)=0x4}) 26m37.243284583s ago: executing program 6 (id=474): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0x7ffffff, 0xfffffd77) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f0000000000)={0x4, 0xfff}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r6, 0x4010aeb5, &(0x7f00000002c0)={0x200}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x4, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x2, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r10, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) r14 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r14, &(0x7f0000000200)=0x8, 0x8) ioctl$KVM_RUN(r8, 0xae80, 0x0) 26m21.10286757s ago: executing program 5 (id=475): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2, 0x23ac5f9b426ec4b1, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f00004fe000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x7, 0xdddd2000}) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0xfffffffa, 0x80001) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x80, 0xd5d77004, 0x4, r4}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x1, 0x37d03030d7a92616}) r5 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x5, 0xf6}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 26m16.912246823s ago: executing program 6 (id=476): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x5) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@msr={0x14, 0x20, {0x603000000013c65d, 0xf}}], 0x20}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bfe000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@mrs={0xbe, 0x18, {0x603000000013c520}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 26m1.520436647s ago: executing program 6 (id=477): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x121080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)}, &(0x7f00000001c0)=[@featur2={0x1, 0x8}], 0x1) r3 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) close(r1) close(r3) 25m54.952662796s ago: executing program 5 (id=478): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000a1e000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x200) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x7ff, 0x56}) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7ffe}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r2, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 25m47.531804157s ago: executing program 6 (id=479): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x40, 0x4, &(0x7f0000000180)=0x5}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4106931, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc7501, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r10 = ioctl$KVM_CREATE_VM(r9, 0x894c, 0x4) ioctl$KVM_CREATE_VCPU(r10, 0x8008b705, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r13 = eventfd2(0x401, 0x1) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x2, 0xffff1000, 0x1, r13, 0x2}) r14 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r14, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x4, &(0x7f00000004c0)=0x1}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xcd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x7030c2, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 25m41.103722891s ago: executing program 5 (id=480): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4360ae82, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 32) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r4, 0x300000e, 0x4010, r3, 0x0) 25m20.414947042s ago: executing program 6 (id=481): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f00000001c0)={0x10001, 0xfffffffffffff434}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r2, 0x3, 0xa0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000140)={0xe4, 0x0, 0xd7b}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1ff) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db}) 25m18.812919254s ago: executing program 5 (id=482): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c000}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000200)=0x8000000}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x5, 0x1, 0x1, 0x0, @adapter={0x9, 0x400, 0x0, 0x2, 0x6}}]}) 25m4.241478304s ago: executing program 5 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8) 24m32.965829467s ago: executing program 37 (id=481): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r0, 0x4010aeb5, &(0x7f00000001c0)={0x10001, 0xfffffffffffff434}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r2, 0x3, 0xa0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r2, 0x4068aea3, &(0x7f0000000140)={0xe4, 0x0, 0xd7b}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1ff) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db}) 24m13.998143464s ago: executing program 38 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8) 13m16.955911694s ago: executing program 8 (id=501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) (async, rerun: 64) r2 = eventfd2(0x8, 0x80800) (rerun: 64) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x4006}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xc, 0xeeef0000, 0x2, r2}) close(r1) 12m51.269881756s ago: executing program 8 (id=502): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101c02, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x145541, 0x0) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x59) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3b) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x8001}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = eventfd2(0x3ff, 0x1) r9 = eventfd2(0xa, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r8, 0x400, 0x1, r9}) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_assert_reg(r6, 0x603000000013dce8, 0x8000) 12m43.543388448s ago: executing program 7 (id=503): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@svc={0x122, 0x40, {0x200, [0x7, 0x6, 0x1721, 0x8, 0x8]}}, @irq_setup={0x46, 0x18, {0x4, 0x1a2}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x40, 0x800, 0xf}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x122}}], 0xb0}, &(0x7f0000000080)=[@featur1={0x1, 0xe0}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000038ef2dd600000000008000", 0x0, 0x26) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0x7}) (async) ioctl$KVM_ARM_PREFERRED_TARGET(r8, 0x8020aeaf, &(0x7f00000001c0)) 12m27.399851065s ago: executing program 7 (id=504): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @irqchip={0x2, 0x3}}]}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000300)=[@hvc={0x32, 0x40, {0x84000010, [0x2, 0x8001, 0x40000000000, 0xffffffffedc7b76d, 0x8]}}, @uexit={0x0, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x10, 0xff, 0x2}}, @hvc={0x32, 0x40, {0x5000000, [0x8, 0x8, 0x1, 0x6, 0x3]}}, @mrs={0xbe, 0x18, {0xc06000000027d087}}, @eret={0xe6, 0x18, 0x9}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0x2b2}, @mrs={0xbe, 0x18, {0x603000000013e528}}, @msr={0x14, 0x20, {0x603000000013df02, 0xfff}}, @irq_setup={0x46, 0x18, {0x0, 0x2bd}}, @uexit={0x0, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x201}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x7, 0x9f, 0x1ff, 0x1}}, @eret={0xe6, 0x18, 0x75}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x3c}}, @svc={0x122, 0x40, {0x6000000, [0x7, 0x9, 0x5, 0x1]}}, @irq_setup={0x46, 0x18, {0x1, 0x3ab}}, @hvc={0x32, 0x40, {0x84000051, [0x100, 0x1, 0x3, 0x5, 0xfffffffffffffffd]}}, @uexit={0x0, 0x18, 0xffff}, @svc={0x122, 0x40, {0x84000003, [0x5, 0xe05, 0x400, 0x2ac000, 0x1]}}, @uexit={0x0, 0x18, 0x4ba3}, @eret={0xe6, 0x18, 0xfea}, @hvc={0x32, 0x40, {0x84000005, [0xfff, 0x9, 0x8, 0x3, 0xbc5b]}}, @mrs={0xbe, 0x18, {0x603000000013c4f6}}], 0x398}, &(0x7f00000001c0)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) ioctl$KVM_CHECK_EXTENSION(r7, 0x5421, 0x6) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) close(r1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @irqchip={0x2, 0x3}}]}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000300)=[@hvc={0x32, 0x40, {0x84000010, [0x2, 0x8001, 0x40000000000, 0xffffffffedc7b76d, 0x8]}}, @uexit={0x0, 0x18, 0x7}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x10, 0xff, 0x2}}, @hvc={0x32, 0x40, {0x5000000, [0x8, 0x8, 0x1, 0x6, 0x3]}}, @mrs={0xbe, 0x18, {0xc06000000027d087}}, @eret={0xe6, 0x18, 0x9}, @eret={0xe6, 0x18, 0x3}, @uexit={0x0, 0x18, 0x2b2}, @mrs={0xbe, 0x18, {0x603000000013e528}}, @msr={0x14, 0x20, {0x603000000013df02, 0xfff}}, @irq_setup={0x46, 0x18, {0x0, 0x2bd}}, @uexit={0x0, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x4, 0x3, 0x201}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x4, 0x7, 0x9f, 0x1ff, 0x1}}, @eret={0xe6, 0x18, 0x75}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x3c}}, @svc={0x122, 0x40, {0x6000000, [0x7, 0x9, 0x5, 0x1]}}, @irq_setup={0x46, 0x18, {0x1, 0x3ab}}, @hvc={0x32, 0x40, {0x84000051, [0x100, 0x1, 0x3, 0x5, 0xfffffffffffffffd]}}, @uexit={0x0, 0x18, 0xffff}, @svc={0x122, 0x40, {0x84000003, [0x5, 0xe05, 0x400, 0x2ac000, 0x1]}}, @uexit={0x0, 0x18, 0x4ba3}, @eret={0xe6, 0x18, 0xfea}, @hvc={0x32, 0x40, {0x84000005, [0xfff, 0x9, 0x8, 0x3, 0xbc5b]}}, @mrs={0xbe, 0x18, {0x603000000013c4f6}}], 0x398}, &(0x7f00000001c0)=[@featur1={0x1, 0x8}], 0x1) (async) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0x5421, 0x6) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async) 12m24.333193707s ago: executing program 8 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) 12m12.593935821s ago: executing program 8 (id=506): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1912c1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1ff, 0xa, 0x1}}) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x4, 0x9, 0x1}}) (rerun: 64) r7 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r15, 0x40000) (async) r16 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000380)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r17, 0x4004ae99, 0x0) (async) r18 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r18, 0x4010aeac, &(0x7f0000000100)=@arm64_core={0x6030000000100042, &(0x7f00000000c0)}) (async) ioctl$KVM_SET_VCPU_EVENTS(r18, 0x4040aea0, &(0x7f00000001c0)=@arm64={0xdb, 0x8, 0x3, '\x00', 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x2, 0x8000000, 0x1000, &(0x7f0000c42000/0x1000)=nil}) 12m5.500826446s ago: executing program 7 (id=507): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0x40086602, 0x2f) r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r3 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r2, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, 0x0, 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x40010, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, 0x0, 0x82, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010003a, &(0x7f00000001c0)=0x9}) (async) r5 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000003, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) mmap$KVM_VCPU(&(0x7f0000581000/0x1000)=nil, 0x930, 0x0, 0x4020131, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0xf739, 0x4, &(0x7f0000000000)=0x7fffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28) (async) r10 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) 11m48.107626194s ago: executing program 8 (id=508): mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000000, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r6 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013dce2}}, @eret={0xe6, 0x18, 0x10001}, @code={0xa, 0x6c, {"201288d200c0b8f2c10080d2a20080d2230080d2e40180d2020000d40040241ec02b97d20000b8f2e10080d2e20080d2630180d2840080d2020000d40004c03c008008d5000cc09a0000400c007008d5003c000e007008d5"}}, @code={0xa, 0x9c, {"000d8fd20020b0f2810080d2e20180d2430180d2040080d2020000d4e02f9fd200e0b0f2210080d2620080d2630180d2a40180d2020000d40004000f007008d50060e00d00fc205e40168fd20080b0f2610080d2c20180d2030080d2040180d2020000d40000003a007008d5e0bb85d20060b8f2c10080d2a20180d2230180d2a40080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x4, 0x8, 0x6b18, 0x3, 0x2}}, @msr={0x14, 0x20, {0x603000000013e101, 0xb}}, @smc={0x1e, 0x40, {0xc400000d, [0x33, 0x1000, 0x51879aa0, 0x3, 0x3]}}, @eret={0xe6, 0x18, 0xffffffff}, @irq_setup={0x46, 0x18, {0x1, 0x3a}}, @hvc={0x32, 0x40, {0xc4000001, [0x40, 0x7ff, 0x3, 0x1, 0x8000]}}, @uexit={0x0, 0x18}, @code={0xa, 0x6c, {"007008d5007008d5000008d5405b87d20040b0f2e10080d2020080d2e30180d2040180d2020000d40024c09a000040a9007008d560309ed20080b8f2810180d2620180d2a30080d2440080d2020000d40004403c000028d5"}}, @irq_setup={0x46, 0x18, {0x4, 0x146}}, @code={0xa, 0x84, {"e0ad8ad20000b8f2610180d2e20180d2a30080d2440180d2020000d4e00300aa0038200e008008d5000028d50038601ea00c80d20060b8f2a10180d2620180d2a30180d2e40080d2020000d440ce9fd200a0b8f2e10180d2c20080d2030180d2840080d2020000d400088038000cc0da"}}, @msr={0x14, 0x20, {0x603000000013dea4, 0x100}}], 0x370}, &(0x7f00000003c0)=[@featur2={0x1, 0x80}], 0x1) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r1, 0x2000008, 0x10, r6, 0x0) 11m44.993662921s ago: executing program 7 (id=509): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = mmap$KVM_VCPU(&(0x7f0000fef000/0x10000)=nil, r0, 0x2000007, 0x11, 0xffffffffffffffff, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r0, 0x1, 0x40010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000040)="ab68b38b27df740dd925d4082cc71faf82d92518f0b027988346ca1ba95e8a1e69d1def680fd0fed104e6ba503d90367a8d62002999b60aae0b5bef4bd33d7027d85ff83780ba85c", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x2, 0x10, r2, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) syz_kvm_setup_cpu$arm64(r4, r2, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000000380)=[{0x0, &(0x7f00000000c0)=[@hvc={0x32, 0x40, {0x84000002, [0xc3a, 0xfffffffffffffff4, 0x100000000, 0x3, 0x7]}}, @hvc={0x32, 0x40, {0xc4000014, [0x5, 0xa05, 0x3, 0x800, 0xfffffffffffffff9]}}, @mrs={0xbe, 0x18, {0x603000000013df40}}, @svc={0x122, 0x40, {0xc5000021, [0xe3, 0x400, 0x164f, 0x1ff, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x3, 0xf, 0xc42, 0xb}}, @irq_setup={0x46, 0x18, {0x2, 0x7}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x267}}, @hvc={0x32, 0x40, {0x84000008, [0x5, 0x8000, 0xc282, 0x4, 0x100000001]}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x1, 0x1, 0x0, 0xb, 0x1fb3}}, @uexit={0x0, 0x18, 0x10000000}, @mrs={0xbe, 0x18, {0x603000000013c213}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x40, 0x5, 0x1}}, @uexit={0x0, 0x18, 0x1}, @irq_setup={0x46, 0x18, {0x2, 0x35f}}, @svc={0x122, 0x40, {0x200, [0x9, 0xffff, 0x9a, 0x7, 0x10000]}}, @irq_setup={0x46, 0x18, {0x0, 0xac}}], 0x290}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x88}], 0x1) (async) mmap$KVM_VCPU(&(0x7f0000ccf000/0x1000)=nil, r0, 0x1000004, 0x100010, r2, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000400)="bbe1c037beb009876ab2c23a5b5402f60b9afd25b50068e26c8e73e8924f82eb5db3d509b0f71255e8f12afcac5d110bf48df3712183faef1763502980bfa8df96ef6ce02a291195", 0x0, 0x48) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x801, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xff) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000004c0)={0xfffffffffffff000, 0x3000}) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async, rerun: 64) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000500)={0x1, [0x7]}) (async, rerun: 64) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000540)={0x67, "80cb7b43fe0dcadb4fa87f97c09d53c31c6a90f20f46c4927093332ac72aa75a3d95f37b48a43ad1c8e0a7f478d451f8b6324e2c193f5ba8f2b0c7f5aad1317af965d770b61ba5c7d91faa4a9fce987a7067c7fbe54d8e57164de29ffbdb4292290d04e645e82d"}) (async) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000600)=@arm64_core={0x6030000000100024, &(0x7f00000005c0)=0x5}) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000c89000/0x4000)=nil, r0, 0x8, 0x12, r2, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1388) (async, rerun: 64) r6 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (rerun: 64) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000680)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18, 0x28}], 0x18}, &(0x7f00000006c0)=[@featur2], 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000700)=@arm64) (async) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, 0xffffffffffffffff) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000740)={0x7, 0x4000}) (async) mmap$KVM_VCPU(&(0x7f0000de2000/0x1000)=nil, 0x0, 0x200000e, 0x20010, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000780)={0x8000000, 0xdddde000, 0x2, 0x1, 0x6}) 11m30.810533091s ago: executing program 7 (id=510): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000000, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c038, &(0x7f0000000200)=0x3}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0x0, 0x0) close(r7) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000002000/0x400000)=nil) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r7, &(0x7f0000000180)=0x5, 0xfffffde3) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 11m30.34317142s ago: executing program 8 (id=511): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8521, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000200)=0x8000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a0000}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x80) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, &(0x7f00000001c0)={0x1fe, 0x80, 0x280, 0x0}) 11m10.621898411s ago: executing program 7 (id=512): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r9, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x341302, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0) r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0xd000}) 10m41.930833383s ago: executing program 39 (id=511): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r4 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8521, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x3, &(0x7f0000000200)=0x8000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a0000}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x80) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r12, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, &(0x7f00000001c0)={0x1fe, 0x80, 0x280, 0x0}) 10m19.579720769s ago: executing program 40 (id=512): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x29) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r9, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r9, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x341302, 0x0) openat$kvm(0x3f, &(0x7f0000000040), 0x0, 0x0) r10 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0xd000}) 1m30.055259103s ago: executing program 1 (id=514): r0 = syz_kvm_add_vcpu$arm64(0x0, 0x0, &(0x7f0000000840)=[@featur1={0x1, 0xc7}], 0x1) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) syz_kvm_assert_reg(r5, 0x603000000013df18, 0x7fff) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000000)=@arm64) mmap$KVM_VCPU(&(0x7f0000f0d000/0x2000)=nil, 0x930, 0x6000006, 0x2010, r0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000040)={0x4f, "30ccf48467f974608ebc6a094e1e1df3f041b96736310cf0ce144c54b31c44481c5f0b7b53ef38ef7b7fc1a09ebcffe7afd2e9d24614f96cea893e7de8b9fd771ee7d844b3e1be86eb556006e09ddd"}) syz_kvm_add_vcpu$arm64(0x0, 0x0, &(0x7f0000000840)=[@featur1={0x1, 0xc7}], 0x1) (async) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) (async) syz_kvm_assert_reg(r5, 0x603000000013df18, 0x7fff) (async) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000000)=@arm64) (async) mmap$KVM_VCPU(&(0x7f0000f0d000/0x2000)=nil, 0x930, 0x6000006, 0x2010, r0, 0x0) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000040)={0x4f, "30ccf48467f974608ebc6a094e1e1df3f041b96736310cf0ce144c54b31c44481c5f0b7b53ef38ef7b7fc1a09ebcffe7afd2e9d24614f96cea893e7de8b9fd771ee7d844b3e1be86eb556006e09ddd"}) (async) 1m8.842458122s ago: executing program 1 (id=515): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6025c2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x428000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000000000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x284002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) syz_kvm_setup_cpu$arm64(r6, r5, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r6], 0x5f0}], 0x1, 0x0, &(0x7f0000000200)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000000)=0x78}) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x1000003, 0x16831, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x1}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_vgic_v3_setup(r1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20000) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_init) ioctl$KVM_RUN(r5, 0xae80, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000001c0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x41) 1m0.250778571s ago: executing program 9 (id=513): openat$kvm(0x0, &(0x7f0000000000), 0x2e0161, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x1a0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) (async) close(r2) 50.812397988s ago: executing program 1 (id=516): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, 0x0, 0xfffffff6}, 0x0, 0x55) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r12, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_kvm_setup_cpu$arm64(r10, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, &(0x7f0000000280)=[@smc={0x1e, 0x40, {0x20, [0xffffffff, 0x100000000, 0x5, 0x4, 0xf853]}}, @irq_setup={0x46, 0x18, {0x2, 0x3a4}}, @smc={0x1e, 0x40, {0xc400000e, [0x9, 0x8, 0x4, 0x0, 0x2f9b779c]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x18e}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18}, @mrs={0xbe, 0x18, {0x603000000013c289}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x219}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x301}}, @code={0xa, 0x54, {"0000621e007008d5000028d5008000c80070000c000028d5005c200e00004088208c8ed200c0b8f2c10180d2820080d2e30180d2240080d2020000d40020006f"}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xb, 0x59aafc0a, 0xfffffffa, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x5, 0x1}}, @svc={0x122, 0x40, {0x4000, [0x5, 0x4, 0x6, 0x0, 0x3]}}, @hvc={0x32, 0x40, {0x80000001, [0x10b3, 0xa, 0x3, 0x9, 0x57]}}, @smc={0x1e, 0x40, {0x30000000, [0x6820, 0xffffffff, 0x1, 0x7f, 0x7]}}, @hvc={0x32, 0x1f, {0x4, [0x9, 0x4800000000000000, 0x3, 0x5, 0x2]}}, @eret={0xe6, 0x18, 0x8001}, @svc={0x122, 0x40, {0x8600ff01, [0x5, 0x85e, 0xcb2, 0x4, 0x4]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x6e}}, @eret={0xe6, 0x18, 0x9}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x3, 0x331}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x1c3}}, @code={0xa, 0x6c, {"008008d5007008d5204b8dd20060b0f2210080d2e20180d2630080d2a40180d2020000d4008008d5007008d5000080b8007008d5007008d5c0dd84d20000b8f2a10180d2020180d2e30180d2240080d2020000d4000000ab"}}, @hvc={0x32, 0x40, {0x84000010, [0x347, 0x7, 0x0, 0xff, 0x4]}}, @smc={0x1e, 0x40, {0x86000001, [0x6, 0x7f, 0xffffffffffffffc0, 0x0, 0x6]}}, @svc={0x122, 0x40, {0xc4000007, [0x3, 0x9, 0x0, 0x870, 0xe4d]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x7, 0xc}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x400}, @eret={0xe6, 0x18, 0x100000000}, @code={0xa, 0x9c, {"008008d50054200e007008d51f0000ab008008d5e08393d200c0b0f2010180d2a20080d2830180d2e40080d2020000d4e0248dd20080b8f2410080d2020080d2630080d2240080d2020000d4e06c9dd20080b8f2410080d2420080d2e30080d2c40180d2020000d4000e93d20020b0f2410180d2e20180d2c30080d2a40180d2020000d4007008d5"}}], 0x634}], 0x1, 0x0, &(0x7f00000001c0)=[@featur2={0x1, 0x2c}], 0x1) syz_kvm_assert_syzos_uexit$arm64(0x0, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f00000000c0)) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_ARM_PREFERRED_TARGET(r10, 0x8020aeaf, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 11.971660174s ago: executing program 41 (id=513): openat$kvm(0x0, &(0x7f0000000000), 0x2e0161, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x1a0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) (async) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, 0x0}, 0x0, 0x0) (async) close(r2) 0s ago: executing program 42 (id=516): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000300)={0x0, &(0x7f0000000480)=[@smc={0x1e, 0x40, {0xc4000001, [0x8, 0x939, 0xe, 0x7f, 0x4]}}], 0x40}, &(0x7f00000001c0)=[@featur1={0x1, 0xc}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bff000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000140)={0x0, 0x0, 0xfffffff6}, 0x0, 0x55) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x7}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xd000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r12, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_kvm_setup_cpu$arm64(r10, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180)=[{0x0, &(0x7f0000000280)=[@smc={0x1e, 0x40, {0x20, [0xffffffff, 0x100000000, 0x5, 0x4, 0xf853]}}, @irq_setup={0x46, 0x18, {0x2, 0x3a4}}, @smc={0x1e, 0x40, {0xc400000e, [0x9, 0x8, 0x4, 0x0, 0x2f9b779c]}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x18e}}, @uexit={0x0, 0x18, 0x7}, @mrs={0xbe, 0x18}, @mrs={0xbe, 0x18, {0x603000000013c289}}, @its_setup={0x82, 0x28, {0x2, 0x4, 0x219}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x301}}, @code={0xa, 0x54, {"0000621e007008d5000028d5008000c80070000c000028d5005c200e00004088208c8ed200c0b8f2c10180d2820080d2e30180d2240080d2020000d40020006f"}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x1, 0x3, 0xb, 0x59aafc0a, 0xfffffffa, 0x1}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x58, 0x5, 0x1}}, @svc={0x122, 0x40, {0x4000, [0x5, 0x4, 0x6, 0x0, 0x3]}}, @hvc={0x32, 0x40, {0x80000001, [0x10b3, 0xa, 0x3, 0x9, 0x57]}}, @smc={0x1e, 0x40, {0x30000000, [0x6820, 0xffffffff, 0x1, 0x7f, 0x7]}}, @hvc={0x32, 0x1f, {0x4, [0x9, 0x4800000000000000, 0x3, 0x5, 0x2]}}, @eret={0xe6, 0x18, 0x8001}, @svc={0x122, 0x40, {0x8600ff01, [0x5, 0x85e, 0xcb2, 0x4, 0x4]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x6e}}, @eret={0xe6, 0x18, 0x9}, @eret={0xe6, 0x18, 0x4}, @irq_setup={0x46, 0x18, {0x3, 0x331}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x1c3}}, @code={0xa, 0x6c, {"008008d5007008d5204b8dd20060b0f2210080d2e20180d2630080d2a40180d2020000d4008008d5007008d5000080b8007008d5007008d5c0dd84d20000b8f2a10180d2020180d2e30180d2240080d2020000d4000000ab"}}, @hvc={0x32, 0x40, {0x84000010, [0x347, 0x7, 0x0, 0xff, 0x4]}}, @smc={0x1e, 0x40, {0x86000001, [0x6, 0x7f, 0xffffffffffffffc0, 0x0, 0x6]}}, @svc={0x122, 0x40, {0xc4000007, [0x3, 0x9, 0x0, 0x870, 0xe4d]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x0, 0x7, 0xc}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x400}, @eret={0xe6, 0x18, 0x100000000}, @code={0xa, 0x9c, {"008008d50054200e007008d51f0000ab008008d5e08393d200c0b0f2010180d2a20080d2830180d2e40080d2020000d4e0248dd20080b8f2410080d2020080d2630080d2240080d2020000d4e06c9dd20080b8f2410080d2420080d2e30080d2c40180d2020000d4000e93d20020b0f2410180d2e20180d2c30080d2a40180d2020000d4007008d5"}}], 0x634}], 0x1, 0x0, &(0x7f00000001c0)=[@featur2={0x1, 0x2c}], 0x1) syz_kvm_assert_syzos_uexit$arm64(0x0, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f00000000c0)) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_ARM_PREFERRED_TARGET(r10, 0x8020aeaf, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) kernel console output (not intermixed with test programs): [ 381.469057][ T3151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.613156][ T3151] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:19869' (ED25519) to the list of known hosts. [ 591.223346][ T25] audit: type=1400 audit(590.420:60): avc: denied { name_bind } for pid=3302 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 592.158532][ T25] audit: type=1400 audit(591.360:61): avc: denied { execute } for pid=3303 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 592.183269][ T25] audit: type=1400 audit(591.370:62): avc: denied { execute_no_trans } for pid=3303 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 613.987375][ T25] audit: type=1400 audit(613.180:63): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 614.020468][ T25] audit: type=1400 audit(613.220:64): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.126530][ T3303] cgroup: Unknown subsys name 'net' [ 614.180132][ T25] audit: type=1400 audit(613.380:65): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 614.583022][ T3303] cgroup: Unknown subsys name 'cpuset' [ 614.681530][ T3303] cgroup: Unknown subsys name 'rlimit' [ 615.658701][ T25] audit: type=1400 audit(614.860:66): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.683471][ T25] audit: type=1400 audit(614.870:67): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 615.701125][ T25] audit: type=1400 audit(614.900:68): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 616.867748][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 616.889957][ T25] audit: type=1400 audit(616.080:69): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 616.909669][ T25] audit: type=1400 audit(616.110:70): avc: denied { write } for pid=3306 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 617.079383][ T25] audit: type=1400 audit(616.280:71): avc: denied { read } for pid=3303 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 617.096391][ T25] audit: type=1400 audit(616.290:72): avc: denied { open } for pid=3303 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 617.146754][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 667.499719][ T25] audit: type=1400 audit(666.700:73): avc: denied { execmem } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 671.802024][ T25] audit: type=1400 audit(671.000:74): avc: denied { read } for pid=3309 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 671.838373][ T25] audit: type=1400 audit(671.020:75): avc: denied { open } for pid=3309 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 671.906044][ T25] audit: type=1400 audit(671.090:76): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 672.178895][ T25] audit: type=1400 audit(671.380:77): avc: denied { module_request } for pid=3309 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 672.215775][ T25] audit: type=1400 audit(671.400:78): avc: denied { module_request } for pid=3310 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 673.281158][ T25] audit: type=1400 audit(672.470:79): avc: denied { sys_module } for pid=3309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 698.707892][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.227919][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.367977][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.853628][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.366780][ T3310] hsr_slave_0: entered promiscuous mode [ 715.392173][ T3310] hsr_slave_1: entered promiscuous mode [ 716.321181][ T3309] hsr_slave_0: entered promiscuous mode [ 716.362499][ T3309] hsr_slave_1: entered promiscuous mode [ 716.407209][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 716.411200][ T3309] Cannot create hsr debugfs directory [ 721.757595][ T25] audit: type=1400 audit(720.950:80): avc: denied { create } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.836580][ T25] audit: type=1400 audit(720.980:81): avc: denied { write } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.877373][ T25] audit: type=1400 audit(721.030:82): avc: denied { read } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 722.036983][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.457177][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.763954][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 723.072185][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.667901][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.852085][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 724.983709][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 725.158982][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 737.701727][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.987949][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.413303][ T3310] veth0_vlan: entered promiscuous mode [ 800.842793][ T3310] veth1_vlan: entered promiscuous mode [ 802.403663][ T3309] veth0_vlan: entered promiscuous mode [ 803.019986][ T3310] veth0_macvtap: entered promiscuous mode [ 803.150498][ T3309] veth1_vlan: entered promiscuous mode [ 803.781732][ T3310] veth1_macvtap: entered promiscuous mode [ 805.951168][ T3309] veth0_macvtap: entered promiscuous mode [ 806.003421][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.039984][ T3353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.048229][ T3353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.055902][ T3353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.401880][ T3309] veth1_macvtap: entered promiscuous mode [ 808.502595][ T25] audit: type=1400 audit(807.700:83): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 808.765559][ T25] audit: type=1400 audit(807.950:84): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/syzkaller.malWSX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 809.022900][ T25] audit: type=1400 audit(808.220:85): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 809.233782][ T25] audit: type=1400 audit(808.430:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/syzkaller.malWSX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 809.321324][ T3401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.358564][ T3401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.367909][ T3401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.369031][ T3401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.403436][ T25] audit: type=1400 audit(808.600:87): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/syzkaller.malWSX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 810.030225][ T25] audit: type=1400 audit(809.150:88): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 810.306477][ T25] audit: type=1400 audit(809.500:89): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 810.441041][ T25] audit: type=1400 audit(809.640:90): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=3778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 810.783136][ T25] audit: type=1400 audit(809.980:91): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 810.900761][ T25] audit: type=1400 audit(810.100:92): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 812.133382][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 829.342258][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 829.359711][ T25] audit: type=1400 audit(828.540:97): avc: denied { read write } for pid=3475 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.527357][ T25] audit: type=1400 audit(828.700:98): avc: denied { open } for pid=3475 comm="syz.1.3" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.663521][ T25] audit: type=1400 audit(828.860:99): avc: denied { ioctl } for pid=3475 comm="syz.1.3" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 876.031591][ T25] audit: type=1400 audit(875.210:100): avc: denied { append } for pid=3509 comm="syz.1.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 877.828981][ T25] audit: type=1400 audit(876.990:101): avc: denied { execute } for pid=3509 comm="syz.1.13" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 943.763656][ T3432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.752893][ T3432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.669696][ T3432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.260314][ T3432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.322448][ T3432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.618163][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.839458][ T3432] bond0 (unregistering): Released all slaves [ 973.372730][ T3432] hsr_slave_0: left promiscuous mode [ 973.558072][ T3432] hsr_slave_1: left promiscuous mode [ 974.226831][ T3432] veth1_macvtap: left promiscuous mode [ 974.236914][ T3432] veth0_macvtap: left promiscuous mode [ 974.251457][ T3432] veth1_vlan: left promiscuous mode [ 974.293006][ T3432] veth0_vlan: left promiscuous mode [ 1046.762035][ T3528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.107295][ T3528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.768300][ T25] audit: type=1400 audit(1058.950:102): avc: denied { setattr } for pid=3605 comm="syz.0.29" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1078.893713][ T3528] hsr_slave_0: entered promiscuous mode [ 1079.020665][ T3528] hsr_slave_1: entered promiscuous mode [ 1096.093236][ T3528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1096.482953][ T3528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1096.842074][ T3528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1097.279230][ T3528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1123.620387][ T3528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.209745][ T3528] veth0_vlan: entered promiscuous mode [ 1228.827088][ T3528] veth1_vlan: entered promiscuous mode [ 1231.827315][ T3528] veth0_macvtap: entered promiscuous mode [ 1232.248926][ T3528] veth1_macvtap: entered promiscuous mode [ 1234.973024][ T3357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.985574][ T3357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.007579][ T3357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.013761][ T3357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.205394][ T25] audit: type=1400 audit(1281.400:103): avc: denied { map } for pid=3773 comm="syz.2.47" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1282.278524][ T25] audit: type=1400 audit(1281.440:104): avc: denied { execute } for pid=3773 comm="syz.2.47" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1714.679762][ T4014] kvm [4014]: Failed to find VMA for hva 0x20d8d000 [ 1815.620403][ T25] audit: type=1400 audit(1814.820:105): avc: denied { ioctl } for pid=4067 comm="syz.2.138" path="net:[4026532619]" dev="nsfs" ino=4026532619 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2026.452707][ T4177] kvm [4177]: Failed to find VMA for hva 0x20e8b000 [ 3342.069429][ T4896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3342.451197][ T4896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3367.701359][ T4906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3368.057920][ T4906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3374.702763][ T4896] hsr_slave_0: entered promiscuous mode [ 3374.822417][ T4896] hsr_slave_1: entered promiscuous mode [ 3374.916751][ T4896] debugfs: 'hsr0' already exists in 'hsr' [ 3374.947693][ T4896] Cannot create hsr debugfs directory [ 3390.009856][ T4896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3390.431291][ T4896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3390.816129][ T4896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3391.063694][ T4896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3396.821048][ T4906] hsr_slave_0: entered promiscuous mode [ 3396.881678][ T4906] hsr_slave_1: entered promiscuous mode [ 3397.005948][ T4906] debugfs: 'hsr0' already exists in 'hsr' [ 3397.017066][ T4906] Cannot create hsr debugfs directory [ 3413.413821][ T4906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3414.317354][ T4906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3414.929275][ T4906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3415.688299][ T4906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3424.403081][ T4896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3442.111990][ T4272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3443.728599][ T4272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3445.191040][ T4272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3446.829641][ T4272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3460.489129][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3460.602536][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3460.710869][ T4272] bond0 (unregistering): Released all slaves [ 3461.902953][ T4272] hsr_slave_0: left promiscuous mode [ 3461.969603][ T4272] hsr_slave_1: left promiscuous mode [ 3462.471380][ T4272] veth1_macvtap: left promiscuous mode [ 3462.479186][ T4272] veth0_macvtap: left promiscuous mode [ 3462.490221][ T4272] veth1_vlan: left promiscuous mode [ 3462.506633][ T4272] veth0_vlan: left promiscuous mode [ 3487.420419][ T4859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3489.117341][ T4859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3490.420537][ T4859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3491.040119][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3491.541113][ T4859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3510.040389][ T4859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3510.250024][ T4859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3510.457842][ T4859] bond0 (unregistering): Released all slaves [ 3513.186388][ T4859] hsr_slave_0: left promiscuous mode [ 3513.273051][ T4859] hsr_slave_1: left promiscuous mode [ 3513.999869][ T4859] veth1_macvtap: left promiscuous mode [ 3514.029170][ T4859] veth0_macvtap: left promiscuous mode [ 3514.047170][ T4859] veth1_vlan: left promiscuous mode [ 3514.067928][ T4859] veth0_vlan: left promiscuous mode [ 3589.623685][ T4896] veth0_vlan: entered promiscuous mode [ 3590.373404][ T4896] veth1_vlan: entered promiscuous mode [ 3593.516840][ T4896] veth0_macvtap: entered promiscuous mode [ 3594.048347][ T4896] veth1_macvtap: entered promiscuous mode [ 3597.213098][ T4054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3597.225854][ T4054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3597.271050][ T4054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3597.326649][ T4054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3641.831016][ T4906] veth0_vlan: entered promiscuous mode [ 3643.068524][ T4906] veth1_vlan: entered promiscuous mode [ 3646.041007][ T4906] veth0_macvtap: entered promiscuous mode [ 3646.472064][ T4906] veth1_macvtap: entered promiscuous mode [ 3649.748123][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3649.751815][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3649.767855][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3649.801178][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3988.226129][ T4272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3990.433064][ T4272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3992.829553][ T4272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3994.712476][ T4272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4018.037439][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4018.321528][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4018.611817][ T4272] bond0 (unregistering): Released all slaves [ 4021.716535][ T4272] hsr_slave_0: left promiscuous mode [ 4021.817807][ T4272] hsr_slave_1: left promiscuous mode [ 4022.526763][ T4272] veth1_macvtap: left promiscuous mode [ 4022.533505][ T4272] veth0_macvtap: left promiscuous mode [ 4022.567030][ T4272] veth1_vlan: left promiscuous mode [ 4022.596465][ T4272] veth0_vlan: left promiscuous mode [ 4046.428543][ T4272] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4047.998529][ T4272] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4049.247243][ T4272] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4050.989191][ T4272] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4071.451022][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4071.570135][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4071.672675][ T4272] bond0 (unregistering): Released all slaves [ 4073.713475][ T4272] hsr_slave_0: left promiscuous mode [ 4073.845997][ T4272] hsr_slave_1: left promiscuous mode [ 4075.152527][ T4272] veth1_macvtap: left promiscuous mode [ 4075.167658][ T4272] veth0_macvtap: left promiscuous mode [ 4075.197559][ T4272] veth1_vlan: left promiscuous mode [ 4075.218380][ T4272] veth0_vlan: left promiscuous mode [ 4098.989503][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4099.710477][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4114.620906][ T5301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4114.822548][ T5301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4125.432432][ T5292] hsr_slave_0: entered promiscuous mode [ 4125.530185][ T5292] hsr_slave_1: entered promiscuous mode [ 4144.093427][ T5301] hsr_slave_0: entered promiscuous mode [ 4144.209127][ T5301] hsr_slave_1: entered promiscuous mode [ 4144.278237][ T5301] debugfs: 'hsr0' already exists in 'hsr' [ 4144.296705][ T5301] Cannot create hsr debugfs directory [ 4144.351205][ T5292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 4144.809442][ T5292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 4145.795545][ T5292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 4146.147271][ T5292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 4164.413149][ T5301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4164.783223][ T5301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4165.168598][ T5301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4165.507102][ T5301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4176.051140][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4193.906569][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4313.508539][ T5292] veth0_vlan: entered promiscuous mode [ 4314.718360][ T5292] veth1_vlan: entered promiscuous mode [ 4318.329716][ T5292] veth0_macvtap: entered promiscuous mode [ 4318.938430][ T5292] veth1_macvtap: entered promiscuous mode [ 4322.992192][ T3319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4323.018398][ T4272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4323.101608][ T4054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4323.129107][ T4054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4338.900043][ T5301] veth0_vlan: entered promiscuous mode [ 4340.472248][ T5301] veth1_vlan: entered promiscuous mode [ 4344.743034][ T5301] veth0_macvtap: entered promiscuous mode [ 4345.749881][ T5301] veth1_macvtap: entered promiscuous mode [ 4350.608414][ T4272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4350.650547][ T5416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4350.686189][ T5416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4350.687008][ T5416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4908.920693][ T5306] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4911.096918][ T5306] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4914.341641][ T5306] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4916.241227][ T5306] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4940.122152][ T5306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4940.389466][ T5306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4940.576847][ T5306] bond0 (unregistering): Released all slaves [ 4944.950841][ T5306] hsr_slave_0: left promiscuous mode [ 4945.387365][ T5306] hsr_slave_1: left promiscuous mode [ 4946.919365][ T5306] veth1_macvtap: left promiscuous mode [ 4946.923529][ T5306] veth0_macvtap: left promiscuous mode [ 4946.941716][ T5306] veth1_vlan: left promiscuous mode [ 4946.943284][ T5306] veth0_vlan: left promiscuous mode [ 4980.357750][ T5306] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4982.213570][ T5306] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4984.173607][ T5306] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4985.861933][ T5306] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5012.898110][ T5306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5013.351431][ T5306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5013.572046][ T5306] bond0 (unregistering): Released all slaves [ 5015.868140][ T5306] hsr_slave_0: left promiscuous mode [ 5015.923232][ T5306] hsr_slave_1: left promiscuous mode [ 5016.473997][ T5306] veth1_macvtap: left promiscuous mode [ 5016.489821][ T5306] veth0_macvtap: left promiscuous mode [ 5016.510975][ T5306] veth1_vlan: left promiscuous mode [ 5016.532672][ T5306] veth0_vlan: left promiscuous mode [ 5067.180002][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5067.572065][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5079.192752][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5079.608471][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5100.509015][ T5846] hsr_slave_0: entered promiscuous mode [ 5100.579931][ T5846] hsr_slave_1: entered promiscuous mode [ 5118.273729][ T5854] hsr_slave_0: entered promiscuous mode [ 5118.554018][ T5854] hsr_slave_1: entered promiscuous mode [ 5118.751673][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 5118.766494][ T5854] Cannot create hsr debugfs directory [ 5127.298258][ T5846] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 5128.046478][ T5846] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 5128.867390][ T5846] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 5129.655930][ T5846] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 5141.107391][ T5854] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 5141.701180][ T5854] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 5142.238761][ T5854] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 5142.690955][ T5854] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 5168.611979][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5180.407223][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5341.388452][ T5846] veth0_vlan: entered promiscuous mode [ 5342.660501][ T5846] veth1_vlan: entered promiscuous mode [ 5346.757730][ T5846] veth0_macvtap: entered promiscuous mode [ 5347.430179][ T5846] veth1_macvtap: entered promiscuous mode [ 5352.197785][ T5726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5352.216076][ T5726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5352.228682][ T5726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5352.271234][ T5726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5357.099300][ T5854] veth0_vlan: entered promiscuous mode [ 5359.752251][ T5854] veth1_vlan: entered promiscuous mode [ 5365.537367][ T5854] veth0_macvtap: entered promiscuous mode [ 5366.528050][ T5854] veth1_macvtap: entered promiscuous mode [ 5371.999920][ T5306] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5372.215436][ T5306] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5372.275934][ T4979] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5372.357610][ T4979] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5765.879108][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5768.378166][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5770.892815][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5773.349748][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5806.873785][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5807.211173][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5807.447399][ T50] bond0 (unregistering): Released all slaves [ 5809.439958][ T50] hsr_slave_0: left promiscuous mode [ 5809.527822][ T50] hsr_slave_1: left promiscuous mode [ 5810.158995][ T50] veth1_macvtap: left promiscuous mode [ 5810.160420][ T50] veth0_macvtap: left promiscuous mode [ 5810.172864][ T50] veth1_vlan: left promiscuous mode [ 5810.217875][ T50] veth0_vlan: left promiscuous mode [ 5849.752526][ T5856] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5851.800448][ T5856] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5853.628735][ T5856] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5855.362367][ T5856] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5883.871607][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5884.147420][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5884.368718][ T5856] bond0 (unregistering): Released all slaves [ 5887.886001][ T5856] hsr_slave_0: left promiscuous mode [ 5888.019113][ T5856] hsr_slave_1: left promiscuous mode [ 5888.882384][ T5856] veth1_macvtap: left promiscuous mode [ 5888.945918][ T5856] veth0_macvtap: left promiscuous mode [ 5888.997752][ T5856] veth1_vlan: left promiscuous mode [ 5889.029236][ T5856] veth0_vlan: left promiscuous mode [ 5943.943452][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5944.449688][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5949.943872][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5950.373612][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5987.958073][ T6261] hsr_slave_0: entered promiscuous mode [ 5988.038305][ T6261] hsr_slave_1: entered promiscuous mode [ 5993.073583][ T6271] hsr_slave_0: entered promiscuous mode [ 5993.191432][ T6271] hsr_slave_1: entered promiscuous mode [ 5993.223490][ T6271] debugfs: 'hsr0' already exists in 'hsr' [ 5993.307918][ T6271] Cannot create hsr debugfs directory [ 6016.671654][ T6261] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 6019.657410][ T6261] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 6020.788051][ T6261] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 6023.641917][ T6261] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 6039.661964][ T6271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6040.366682][ T6271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6041.060424][ T6271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6041.569649][ T6271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6068.102907][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6081.120941][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6235.743196][ T6271] veth0_vlan: entered promiscuous mode [ 6237.209393][ T6271] veth1_vlan: entered promiscuous mode [ 6240.955910][ T6271] veth0_macvtap: entered promiscuous mode [ 6241.907244][ T6271] veth1_macvtap: entered promiscuous mode [ 6246.806428][ T6040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6246.882906][ T6265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6246.979208][ T6265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6247.271768][ T6265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6258.499597][ T6261] veth0_vlan: entered promiscuous mode [ 6260.409518][ T6261] veth1_vlan: entered promiscuous mode [ 6265.787430][ T6261] veth0_macvtap: entered promiscuous mode [ 6266.850858][ T6261] veth1_macvtap: entered promiscuous mode [ 6272.470989][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6272.678821][ T4979] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6272.719238][ T4979] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6272.725698][ T4979] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6514.413436][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6515.141037][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6526.547035][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6527.210689][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6577.980108][ T6533] hsr_slave_0: entered promiscuous mode [ 6578.189408][ T6533] hsr_slave_1: entered promiscuous mode [ 6578.347222][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 6578.405349][ T6533] Cannot create hsr debugfs directory [ 6591.351867][ T6538] hsr_slave_0: entered promiscuous mode [ 6591.520587][ T6538] hsr_slave_1: entered promiscuous mode [ 6591.563049][ T6538] debugfs: 'hsr0' already exists in 'hsr' [ 6591.695923][ T6538] Cannot create hsr debugfs directory [ 6642.468672][ T6533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6646.177027][ T6533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6649.331765][ T6533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6653.187010][ T6533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6669.392084][ T6538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6670.307949][ T6538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6671.161910][ T6538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 6671.883725][ T6538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 6710.112522][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6725.941316][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6757.759338][ T27] INFO: task syz.1.516:6517 blocked for more than 430 seconds. [ 6757.761918][ T27] Not tainted syzkaller #0 [ 6757.762831][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6757.763333][ T27] task:syz.1.516 state:D stack:0 pid:6517 tgid:6517 ppid:6271 task_flags:0x400040 flags:0x00000019 [ 6757.797103][ T27] Call trace: [ 6757.797665][ T27] __switch_to+0x584/0xb20 (T) [ 6757.799745][ T27] __schedule+0x1eec/0x33a4 [ 6757.800336][ T27] schedule+0xac/0x27c [ 6757.800864][ T27] schedule_timeout+0x5c/0x1e4 [ 6757.801293][ T27] do_wait_for_common+0x28c/0x444 [ 6757.801757][ T27] wait_for_completion+0x44/0x5c [ 6757.802249][ T27] __synchronize_srcu+0x2a4/0x320 [ 6757.802697][ T27] synchronize_srcu+0x3cc/0x4f0 [ 6757.803152][ T27] mmu_notifier_unregister+0x320/0x42c [ 6757.803633][ T27] kvm_put_kvm+0x6a0/0xfa8 [ 6758.005690][ T27] kvm_vm_release+0x58/0x78 [ 6758.006536][ T27] __fput+0x4ac/0x980 [ 6758.007067][ T27] ____fput+0x20/0x58 [ 6758.007503][ T27] task_work_run+0x1bc/0x254 [ 6758.007937][ T27] do_notify_resume+0x1bc/0x270 [ 6758.008396][ T27] el0_svc+0xb8/0x164 [ 6758.008833][ T27] el0t_64_sync_handler+0x84/0x12c [ 6758.009264][ T27] el0t_64_sync+0x198/0x19c [ 6758.010824][ T27] [ 6758.010824][ T27] Showing all locks held in the system: [ 6758.011313][ T27] 1 lock held by khungtaskd/27: [ 6758.011682][ T27] #0: ffff800087806858 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 6758.162115][ T27] 3 locks held by kworker/u4:5/50: [ 6758.167939][ T27] 1 lock held by syslogd/3110: [ 6758.168485][ T27] 2 locks held by getty/3180: [ 6758.168884][ T27] #0: cef0000011d068a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6758.170581][ T27] #1: 99ff80008c54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8 [ 6758.172190][ T27] 2 locks held by syz-executor/3303: [ 6758.172540][ T27] 3 locks held by kworker/u4:1/3319: [ 6758.172951][ T27] 3 locks held by kworker/u4:8/5856: [ 6758.173270][ T27] 2 locks held by kworker/u4:14/6040: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6758.173558][ T27] #0: 3ef000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 6758.326882][ T27] #1: ffff80008ecc7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 6758.328633][ T27] 2 locks held by kworker/u4:3/6265: [ 6758.329074][ T27] 2 locks held by syz.9.513/6514: [ 6758.329444][ T27] 3 locks held by kworker/u4:6/6665: [ 6758.329743][ T27] 3 locks held by dhcpcd-run-hook/6676: [ 6758.330282][ T27] [ 6758.330543][ T27] ============================================= [ 6758.330543][ T27] [ 6758.331333][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 6758.340218][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 6758.341515][ T27] Hardware name: linux,dummy-virt (DT) [ 6758.342359][ T27] Call trace: [ 6758.343113][ T27] show_stack+0x2c/0x3c (C) [ 6758.344036][ T27] __dump_stack+0x30/0x40 [ 6758.344750][ T27] dump_stack_lvl+0x30/0x12c [ 6758.345546][ T27] dump_stack+0x1c/0x28 [ 6758.346287][ T27] vpanic+0x22c/0x59c [ 6758.347048][ T27] vpanic+0x0/0x59c [ 6758.347769][ T27] hung_task_panic+0x0/0x2c [ 6758.348591][ T27] kthread+0x794/0x9a0 [ 6758.349388][ T27] ret_from_fork+0x10/0x20 [ 6758.351192][ T27] Kernel Offset: disabled [ 6758.351892][ T27] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 6758.352950][ T27] Memory Limit: none [ 6758.355151][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:59:43 Registers: info registers vcpu 0 CPU#0 PC=ffff80008068e86c X00=0000000000000102 X01=0000000000000003 X02=ffff800080007840 X03=0000000000000010 X04=0000000000000001 X05=0000000000000001 X06=0000000000000000 X07=ffff800080caffec X08=0000000000000001 X09=0000000000000000 X10=0000000000000078 X11=0000000000000078 X12=c2f000001472ab00 X13=00000000000001b7 X14=0000000000002000 X15=ffff800080007708 X16=ffff800080010e20 X17=00000000000000c2 X18=00000000000000ff X19=0000000000000000 X20=0000000000000132 X21=ffff8000876e0000 X22=ffffc1ffc051ca80 X23=ffff8000800079b4 X24=ffff80008533a7c4 X25=ffff8000876b5000 X26=0000000000000000 X27=00000000000000ff X28=ffff8000876de000 X29=ffff8000800078f0 X30=ffff800080c004e4 SP=ffff8000800078c0 PSTATE=404020c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2525252525252525:2525252525252525 Z01=65642f000a732520:7325207334362e25 Z02=742065726f6d2072:6f662064656b636f Z03=000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:000f00f00f00000f Z05=64656b636f6c6220:373135363a363135 Z06=203a29315f657661:6c735f646e6f6220 Z07=206e612073612067:6e6976616c736e45 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffcdd30260:0000ffffcdd30260 Z17=ffffff80ffffffd0:0000ffffcdd30230 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000