last executing test programs: 58m27.991376094s ago: executing program 1 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f00000000c0)={0x14, 0xff}}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x80a0000, 0x4, 0xd90c, 0x1, 0x4}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, 0x0) 58m27.991040534s ago: executing program 0 (id=45): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_ARM_PREFERRED_TARGET(r0, 0x8020aeaf, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x5, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000080)=0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000500)={0x1fd, 0xc0, 0x0, &(0x7f0000000100)=[0x81, 0x3, 0x0, 0x9, 0x81, 0x2, 0x3ff, 0x1, 0x81, 0x5, 0xff, 0xb, 0x7, 0x7fffffff, 0x4, 0x2, 0x8, 0x0, 0x1, 0xab2, 0x10, 0x7fffffffffffffff, 0x1, 0x100000000, 0x3, 0x23, 0x9, 0x7fffffffffffffff, 0x5, 0x4, 0x9, 0x8000000000000001, 0x632, 0x5, 0x2, 0x1, 0xc, 0x1, 0x1, 0x9, 0x1, 0x7, 0x3, 0xf, 0x73, 0x5, 0x100, 0x2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x9, 0x3, 0x3, 0xf, 0x841, 0x6, 0x0, 0x0, 0x5, 0x5, 0x1, 0x9, 0x3, 0x7fffffffffffffff, 0xc01, 0xf, 0x4, 0x3, 0x400, 0xffffffff, 0xfffffffffffffffd, 0x9, 0xffffffff7fffffff, 0x7, 0xe, 0x769, 0xf000000000000000, 0x7, 0x160, 0x1, 0x1, 0x0, 0x7f, 0x8, 0x10000, 0x1, 0x6, 0x4800000000, 0xdb3b, 0xe8, 0x200, 0xf, 0x2, 0x8000000000000001, 0x5, 0xf3b, 0x0, 0x4, 0x4, 0x5, 0x401, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x6, 0x2, 0x1, 0x0, 0x4, 0x3, 0x9, 0x4, 0x9, 0x7ff, 0x0, 0x5, 0x0, 0xa0, 0x0, 0x200, 0x7, 0x3be, 0xe, 0x8, 0x1fc0000000000000, 0x2]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000580)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000540)={0xc1d8, 0x10000, 0x2}}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000005c0)={0x6, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000640)=@attr_other={0x0, 0xffff, 0x7, &(0x7f0000000600)=0x8}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000006c0)=@attr_arm64={0x0, 0x2, 0x3, &(0x7f0000000680)=0x8000000000000000}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000740)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, &(0x7f0000000700)=0x2}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000780)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_REGS(r7, 0x8360ae81, &(0x7f00000007c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x22000, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000008c0)={0xfe93fc8036083c86}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$arm64(r4, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000a80)=[{0x0, &(0x7f0000000900)=[@its_setup={0x82, 0x28, {0x5a, 0x2, 0x1bb}}, @memwrite={0x6e, 0x30, @generic={0xffffffff, 0x35a, 0x4, 0xc}}, @svc={0x122, 0x40, {0x5000000, [0x1, 0x5, 0xa72b, 0x2, 0x1]}}, @uexit={0x0, 0x18, 0x7}, @hvc={0x32, 0x40, {0xc400000d, [0xb43, 0x3, 0x6, 0xa, 0x3]}}, @hvc={0x32, 0x40, {0x80008000, [0x6, 0x4, 0x800, 0x0, 0x75ab00000000]}}, @msr={0x14, 0x20, {0x603000000013da11, 0x6}}], 0x150}], 0x1, 0x0, &(0x7f0000000ac0)=[@featur2], 0x1) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000b40)=@attr_arm64={0x0, 0x6, 0x0, &(0x7f0000000b00)=0xc}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000bc0)=@riscv64_config={0x8030000000100003, &(0x7f0000000b80)=0x36}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000c40)=@riscv64_csr={0x8030000000300002, &(0x7f0000000c00)=0x4}) r8 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000cc0)={0x4, 0x5, 0x60000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 58m20.629070309s ago: executing program 0 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x77) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(r2, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) 58m17.583500601s ago: executing program 1 (id=47): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x163800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x8, 0x80800) r10 = eventfd2(0x5, 0x1) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x25000, 0x0, r10, 0x2}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000140)={0x8000000000000000, 0x0, 0x2, r9, 0x3}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r9, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000bc2000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000000040)={0x6808, 0x80000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000080)={0x10001, 0x1, 0x40000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0xffff, r13}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000180)=@riscv64_timer={0x8030000004000002, &(0x7f0000000140)=0x400}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 58m10.777668145s ago: executing program 0 (id=48): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000280)=@attr_other={0x0, 0x1ff, 0x200000000807, &(0x7f0000000240)=0x401}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x5, 0xa, 0x0, 0x20020080, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000ae9000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_fw={0x6030000000140000, &(0x7f0000000200)=0x1}) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x77) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x4) r13 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r12, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@featur1={0x1, 0x80}], 0x0) 58m5.855094464s ago: executing program 1 (id=49): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000be1000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)=@arm64_core={0x6030000000100006, &(0x7f0000000040)=0xd}) 57m59.464365065s ago: executing program 1 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x2302, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, r3, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000400)=[@smc={0x1e, 0x40, {0xc400000e, [0x8, 0x1ff, 0x4f42, 0x3, 0x7fffffff]}}, @eret={0xe6, 0x18, 0x1c}, @smc={0x1e, 0x40, {0x84000010, [0xffffffffffffffff, 0xd, 0xf2e, 0x56, 0x3800000000000]}}, @hvc={0x32, 0x40, {0x32000000, [0xffffffffffffffff, 0x6, 0x7, 0x100, 0xffffffffffffffff]}}], 0xd8}, &(0x7f0000000580)=[@featur1={0x1, 0x40}], 0x1) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x1000007, 0x40010, r4, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0x40086602, 0x110c230000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r10 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bc2000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x6}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1ff, 0x0, 0x40000, 0x2000, &(0x7f0000d72000/0x2000)=nil, 0xd, r12}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r11, 0x4208ae9b, &(0x7f00000001c0)={0x3, 0x0, {[0x2, 0xd6, 0x504, 0xf2f, 0x2, 0x8, 0x100000001, 0xa4, 0xfb, 0x4b3, 0xc, 0x8, 0x0, 0x8000, 0xc], [0x6, 0x3, 0xea, 0x3ff, 0x4, 0x3, 0x4, 0x4, 0x5b, 0xb, 0x5, 0x6f2, 0x3, 0x8, 0xa38], [0x0, 0x1, 0x100, 0xc2ef, 0x1, 0x5, 0x9, 0x7fff, 0x7, 0x80000000, 0x6, 0xfffffffffffffffb, 0x6, 0x4, 0x4, 0x1], [0x2, 0x89c8, 0xed, 0x0, 0x7, 0x7, 0x7, 0x7, 0x3, 0x2, 0x2, 0x400, 0x5ac, 0x49e4, 0x0, 0x9]}}) syz_kvm_vgic_v3_setup(r1, 0x1, 0x80) ioctl$KVM_RUN(r11, 0xae80, 0x0) 57m56.395463319s ago: executing program 0 (id=51): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000b80)={0x0, &(0x7f0000000080)=[@mrs={0xbe, 0x18, {0x6030000000138032}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013df73, &(0x7f0000000000)=0x43ff}) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000000040)=0x7fffffff) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xea12157bff932e6}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0x40086602, 0x20000000) syz_kvm_vgic_v3_setup(r8, 0x80004, 0x40) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 57m47.651753495s ago: executing program 0 (id=52): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x603000000010002e, 0x0}) mmap$KVM_VCPU(&(0x7f0000c3c000/0x2000)=nil, 0x0, 0x2000008, 0x16831, r3, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x29) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x35) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0x7, 0xe, 0x0, 0x14e2c28a, 0x9, 0x3, 0xe, 0xd7, 0x1, 0x3, 0x1d, 0x0, 0xf, 0x0, 0x8, 0x9, 0x10, 0x0, '\x00', 0x7, 0x2}) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000100)=@arm64={0x4e, 0x2, 0x0, '\x00', 0x4}) (async) ioctl$KVM_GET_VCPU_EVENTS(r12, 0x8040ae9f, &(0x7f0000000000)=@arm64) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r15 = ioctl$KVM_CREATE_GUEST_MEMFD(r14, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x12, r15, 0x200001fe0000) r16 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x18) syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, 0x0) (async) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000040)={0x8, "22f1ebbef8b17f4b"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 57m47.517193743s ago: executing program 1 (id=53): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, 0xffffffffffffffff, 0x1}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0xeffffffd, 0x801) (async) r4 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r4, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r4, 0x3}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x1000000000003, 0x0, 0x2, r4, 0xf}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r10 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) (async) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r9, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) (async) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r15, r16, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001a, &(0x7f00000000c0)=0x11}) (async) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x603000000010001a, &(0x7f00000000c0)=0x11}) ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x4, 0x8, '\x00', 0xdf}) (async) ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe6, 0x4, 0x8, '\x00', 0xdf}) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x9, 0xe, 0x0, 0xa, 0x2}}], 0x50}, 0x0, 0x0) (async) syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x9, 0xe, 0x0, 0xa, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r13, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000180)={0x8}) 57m32.765643661s ago: executing program 0 (id=54): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x1}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2e) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r13 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) 57m30.593229305s ago: executing program 1 (id=55): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x600000a, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) eventfd2(0x5, 0x81000) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x17) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000000)=0x10}) r8 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_fw={0x6030000000160003, &(0x7f0000000180)=0x4000000000000001}) 56m46.433766669s ago: executing program 32 (id=54): r0 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000ab8000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x10001, 0x10001}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c807, &(0x7f0000000280)=0x1}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2e) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r9, r10, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r13 = syz_kvm_vgic_v3_setup(r12, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r13, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000140)=0x200a8a}) 56m42.395134061s ago: executing program 33 (id=55): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x600000a, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) eventfd2(0x5, 0x81000) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x17) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x90, &(0x7f0000000000)=0x10}) r8 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f00000000c0)=@arm64_fw={0x6030000000160003, &(0x7f0000000180)=0x4000000000000001}) 27m3.691223833s ago: executing program 2 (id=249): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000400)=[{0x0, &(0x7f0000000180)=[@eret={0xe6, 0x18, 0xeb3}, @uexit={0x0, 0x18, 0x22ff}, @irq_setup={0x46, 0x18, {0x2, 0x127}}, @irq_setup={0x46, 0x18, {0x2, 0x229}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x4d}}, @irq_setup={0x46, 0x18, {0x0, 0x2e6}}, @memwrite={0x6e, 0x30, @generic={0xc000, 0xed8, 0x80000000, 0x8}}, @svc={0x122, 0x40, {0x30000000, [0x1, 0x7, 0x4a231e88, 0x2, 0x7]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x4, 0x8, 0x5, 0x7af}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x4, 0x3, 0x3, 0x6, 0x2}}, @code={0xa, 0xb4, {"a02482d20000b0f2410080d2a20080d2630080d2240180d2020000d4401d98d20020b0f2210180d2e20080d2e30180d2640080d2020000d4c0a68ad200e0b8f2010080d2e20080d2630180d2640180d2020000d40034207e80a29ed200c0b0f2810180d2a20080d2830080d2640080d2020000d40040241e000080920080800800ea83d200a0b0f2210180d2620080d2a30180d2240080d2020000d4004c200e"}}], 0x214}], 0x1, 0x0, &(0x7f0000000440)=[@featur2={0x1, 0x18}], 0x1) r2 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ce5000/0x1000)=nil, 0x930, 0x6, 0x4102932, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, r3, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000027000/0x13000)=nil, 0x930, 0x3, 0x4102932, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) 27m2.951809836s ago: executing program 3 (id=250): r0 = eventfd2(0x0, 0x0) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) mmap$KVM_VCPU(&(0x7f0000008000/0x3000)=nil, 0x930, 0x6000004, 0x2011, r0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r10}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x2, 0xeee87802, 0x2000, &(0x7f0000c8a000/0x2000)=nil, 0xd, r10}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x0, 0x4, 0x0}) 26m53.153989419s ago: executing program 2 (id=251): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x40880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000700)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x0, 0x0}) 26m50.244389312s ago: executing program 3 (id=252): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0xffff1000, 0x1000, &(0x7f0000e6c000/0x1000)=nil}) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000080)="fb01ea6d6931e3ac2cc4a29ea6abf4e7454e37c4b8062147000000000067521ce16f8f1f3d9a7a835673312b54ebb2aa5cc87dd22627e700", 0x0, 0x48) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xaa002, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000200)={0x6, 0x58000, 0x2, r11, 0x8}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r11, 0x2}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r11, 0x2}) syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000840)={0x0, &(0x7f0000000380)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x2, 0x10, 0xd, 0x1, 0x2}}, @uexit={0x0, 0x18, 0x980d}, @smc={0x1e, 0x40, {0x100, [0x8000000000000000, 0x1, 0xffffffffffffa36e, 0x41990a46, 0x1]}}, @uexit={0x0, 0x18, 0x7}, @svc={0x122, 0x40, {0x8400ffae, [0x2f3f, 0xfffffffffffffffc, 0x1ff7, 0x7, 0x8]}}, @irq_setup={0x46, 0x18, {0x2, 0x249}}, @svc={0x122, 0x40, {0x7007fff, [0x2, 0x4, 0x4, 0x3ebbaa40, 0x4]}}, @svc={0x122, 0x40, {0x400, [0x2023, 0x1, 0x3, 0x126, 0x401]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x247}}, @svc={0x122, 0x40, {0x84000002, [0x5, 0x8000000000000000, 0x6, 0x10, 0x3]}}, @irq_setup={0x46, 0x18, {0x2, 0x1e2}}, @eret={0xe6, 0x18, 0x23}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x30c}}, @smc={0x1e, 0x40, {0x8400000c, [0x6, 0x5905, 0x7ff, 0x93a4]}}, @eret={0xe6, 0x18, 0x1}, @its_setup={0x82, 0x28, {0x0, 0x4, 0xc0}}, @memwrite={0x6e, 0x30, @generic={0x8080000, 0xf3c, 0x9}}, @mrs={0xbe, 0x18, {0x603000000013d920}}, @mrs={0xbe, 0x18, {0x603000000013def3}}, @eret={0xe6, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013e6d2, 0x3}}, @eret={0xe6, 0x18, 0x100}, @irq_setup={0x46, 0x18, {0x0, 0x3bc}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x5, 0x9, 0x7, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013dea7}}, @uexit={0x0, 0x18, 0x3}, @smc={0x1e, 0x40, {0x80000001, [0xffffffff, 0x200, 0x9, 0x5, 0x81]}}, @mrs={0xbe, 0x18, {0x603000000013debf}}, @svc={0x122, 0x40, {0x84000001, [0xa02, 0xfffffffffffffff0, 0xa1, 0x9, 0x3]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x2, 0xa, 0xb, 0x101, 0x3}}, @msr={0x14, 0x20, {0x603000000013e6c0, 0x77}}], 0x4b0}, &(0x7f0000000880)=[@featur2={0x1, 0x8}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000140), 0x143302, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 26m45.271856368s ago: executing program 2 (id=253): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0xa0000, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000000)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r9, 0x1, 0x16831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100046, &(0x7f0000000000)=0x3bf}) 26m26.663152555s ago: executing program 3 (id=254): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x85574582ac836809}}, @eret={0xe6, 0x18, 0xc}, @code={0xa, 0x6c, {"c03c8ad200a0b0f2a10080d2e20080d2230080d2440080d2020000d4007008d5c08581d20080b8f2210080d2220180d2230080d2640080d2020000d4000028d500b0204e000008d50000601e0028c09ae003005a007008d5"}}, @smc={0x1e, 0x40, {0xc5000020, [0x5, 0xbb, 0x7, 0xfff, 0x10]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x812c, 0xa}}], 0x10c}, &(0x7f0000000180), 0x1) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000001c0)=0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000240)) ioctl$KVM_SET_SREGS(r0, 0x4000ae84, &(0x7f0000000280)={{0x4000, 0x54000, 0x4, 0x2, 0x7, 0x99, 0x8, 0x9, 0x1, 0x7f, 0x0, 0x1}, {0x45000, 0xeeee8000, 0xf, 0x5, 0x0, 0x0, 0x6, 0x8, 0x3, 0x3, 0x3, 0x7}, {0x8000000, 0xdddd0000, 0x10, 0x89, 0x3, 0x80, 0x81, 0x4, 0x0, 0x0, 0x4, 0x6}, {0x45000, 0x25000, 0x9, 0x0, 0x9, 0x7f, 0xc, 0x9, 0x2, 0x70, 0x4, 0x55}, {0x58000, 0x1000, 0xf, 0x7, 0x4, 0x7, 0x5, 0xc, 0x7a, 0x81, 0x0, 0x8}, {0x4000, 0x60000, 0xf, 0x6, 0x4, 0x6, 0x1, 0x3, 0x4, 0x4, 0xaa, 0x3}, {0x50000, 0x200000, 0x3, 0x5, 0xf, 0x4, 0x7, 0x7, 0x6, 0x4, 0x80, 0x5}, {0xfec00000, 0xb000, 0xb, 0xdd, 0x9, 0xc, 0x1, 0xe, 0xa, 0x0, 0x6, 0x80}, {0x4d000, 0x3}, {0x58000, 0x9}, 0x0, 0x0, 0x70000, 0x20006, 0xd, 0x100, 0xeeee0000, [0x3, 0xec9, 0xd56f, 0x891]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) syz_kvm_setup_cpu$arm64(r2, r0, &(0x7f0000bfd000/0x400000)=nil, &(0x7f00000004c0)=[{0x0, &(0x7f00000003c0)=[@smc={0x1e, 0x40, {0x8400000d, [0x7fffffff, 0x0, 0xffffffff80000000, 0xbba8, 0xc5c]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x5, 0x4, 0x4, 0x3}}, @uexit={0x0, 0x18}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x3, 0x3, 0x80000001, 0x9}}, @memwrite={0x6e, 0x30, @generic={0x26000, 0xa97, 0x100000001, 0x88e73514d863eacf}}], 0xd8}], 0x1, 0x0, &(0x7f0000000500)=[@featur2={0x1, 0x8}], 0x1) r3 = eventfd2(0x8, 0x0) write$eventfd(r3, &(0x7f0000000540), 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000580)={r2, 0xff, 0x1, r3}) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000ac0)={0x0, &(0x7f00000005c0)=[@mrs={0xbe, 0x18, {0x603000000013f518}}, @irq_setup={0x46, 0x18, {0x0, 0x235}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x4, 0x5, 0xe6ab, 0x7, 0x2}}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x6030000000138084, 0x2}}, @hvc={0x32, 0x40, {0xc4000012, [0x1ff, 0x2, 0x0, 0x24, 0x3]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x26}}, @uexit={0x0, 0x18}, @smc={0x1e, 0x40, {0x8000, [0x80000001, 0x6107ee04, 0x5, 0x2, 0x7f]}}, @mrs={0xbe, 0x18, {0x603000000013deaf}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x2, 0x10, 0x0, 0xfffffff7, 0x1}}, @smc={0x1e, 0x40, {0x80008000, [0x8, 0x0, 0x100000000, 0x7, 0x7]}}, @hvc={0x32, 0x40, {0x86000000, [0x10000, 0x1000, 0x9, 0x8, 0x3ff]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x0, 0xc, 0xdc9, 0x4, 0x1}}, @hvc={0x32, 0x40, {0x4000000, [0x2b7, 0x3, 0x0, 0x81, 0x2]}}, @eret={0xe6, 0x18, 0x4}, @smc={0x1e, 0x40, {0x86000000, [0x0, 0x134, 0x200, 0x2, 0x8000000000000000]}}, @code={0xa, 0x84, {"001f9fd20040b0f2610180d2e20180d2c30080d2e40180d2020000d400969ad20040b0f2e10080d2820180d2030180d2040180d2020000d40000002e007008d5007008d500209f0d201c84d20080b8f2010180d2820080d2030180d2840080d2020000d4007008d50004801a0068200e"}}, @uexit={0x0, 0x18, 0x2}, @hvc={0x32, 0x40, {0x4, [0x6, 0x4, 0x6, 0x8001, 0x3]}}, @msr={0x14, 0x20, {0x603000000013e200, 0x2}}, @mrs={0xbe, 0x18, {0x603000000013803e}}, @uexit={0x0, 0x18, 0x7fffffff}, @hvc={0x32, 0x40, {0x0, [0x80, 0x7, 0xc, 0x8000000000000000]}}, @irq_setup={0x46, 0x18, {0x4, 0x154}}, @hvc={0x32, 0x40, {0xffff, [0x40, 0x100000000, 0x200, 0x8, 0x18]}}, @memwrite={0x6e, 0x30, @generic={0x25000, 0xcfb, 0x1, 0x2}}], 0x4c4}, &(0x7f0000000b00)=[@featur2], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x4018aee1, &(0x7f0000000b80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000b40)={0x4, 0x276, 0x1}}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000c00)=@riscv64_csr={0x8030000000300008, &(0x7f0000000bc0)=0x2}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000c40)={0x10001, 0xa000}) r8 = eventfd2(0x4, 0x801) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000c80)={r3, 0x7, 0x1, r8}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1f) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x800, 0x0) ioctl$KVM_CAP_ARM_MTE(r4, 0x4068aea3, &(0x7f0000000d00)) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000d80)=0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000e00)=@attr_other={0x0, 0x8, 0x7, &(0x7f0000000dc0)=0x7}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000e40)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8b}) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f0000000e80)=0x5) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000ec0)={0x4, 0xffffffffffffffff, 0x1}) syz_kvm_vgic_v3_setup(r2, 0x0, 0x100) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xc) syz_kvm_vgic_v3_setup(r10, 0x4, 0x20) 26m23.684604572s ago: executing program 2 (id=255): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x3, 0x0) (async) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@mrs={0xbe, 0x18, {0x603000000013806f}}, @svc={0x122, 0x40, {0x20, [0x401, 0x5, 0x10000, 0x4, 0x10000]}}, @msr={0x14, 0x20, {0x603000000013e6d8, 0x3}}, @irq_setup={0x46, 0x18, {0x0, 0x284}}, @smc={0x1e, 0x40, {0x8400000c, [0x80000000, 0xb3, 0x100000001, 0x786f9f7a, 0x6]}}, @uexit={0x0, 0x18, 0xffffffff}, @code={0xa, 0xb4, {"0000206bc0608fd200e0b0f2610180d2e20080d2830080d2640180d2020000d4008008d5000008d5a0089fd20080b8f2a10180d2020180d2a30080d2840180d2020000d4007008d5000c601e609884d20020b8f2610080d2620080d2830080d2640080d2020000d4c02881d20020b0f2210080d2620180d2a30180d2440180d2020000d440d28ad20080b0f2410180d2620180d2c30180d2a40080d2020000d4"}}, @uexit={0x0, 0x18, 0x80000000}, @mrs={0xbe, 0x18, {0x603000000013e6cb}}], 0x1cc}, &(0x7f0000000240)=[@featur2={0x1, 0x6}], 0x1) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000280)={0xe000, 0x0, 0x1}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) (async) close(r0) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x3, 0x3, &(0x7f0000000300)=0x7}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000380)=@attr_pmu_init) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f00000003c0)=0x5) (async, rerun: 32) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000400)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000440)={0x7, 0x7fffffff}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000480)={0x6, 0x2}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000500)=@attr_other={0x0, 0x0, 0x100000001, &(0x7f00000004c0)=0x6}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) (rerun: 64) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) ioctl$KVM_SET_REGS(r5, 0x4360ae82, &(0x7f0000000580)={[0xd, 0x97, 0x2427, 0x6, 0x46, 0x400, 0xfffffffffffffffc, 0x7ff, 0x3c9b, 0xa9, 0x3ac, 0x1, 0xffffffffffffff2b, 0x10000, 0x101, 0xead], 0xdddd2004, 0x100000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x521100, 0x0) r8 = syz_kvm_vgic_v3_setup(r6, 0x0, 0x1e0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000006c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000680)=0x7ff}) (async) syz_kvm_vgic_v3_setup(r4, 0x4, 0x40) (async) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000700)={0xffff1000, 0x58000, 0x2, 0x0, 0x1}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000780)=@arm64_fw={0x6030000000140000, &(0x7f0000000740)=0x62d}) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f00000007c0)={0xb6, 0x0, 0x6}) 26m15.165128239s ago: executing program 3 (id=256): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x53707d15d34a88e3, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x5, 0x3, 0x2}}], 0x28}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r7, 0x541b, 0x2000001c) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000ac0000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000380)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x80, 0x1, 0xc}}, @hvc={0x32, 0x40, {0x80008000, [0x0, 0x7fffffff, 0x65df, 0x4, 0x8]}}, @irq_setup={0x46, 0x18, {0x4, 0xbc}}, @mrs={0xbe, 0x18, {0x603000000013803f}}, @mrs={0xbe, 0x18, {0x603000000013df58}}, @hvc={0x32, 0x40, {0x0, [0xffff, 0x0, 0x1, 0x7fffffffffffffff, 0x8]}}, @irq_setup={0x46, 0x18, {0x3, 0x72}}], 0x110}, &(0x7f00000003c0)=[@featur1={0x1, 0x75}], 0x1) (async) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_kvm_vgic_v3_setup(r9, 0x1, 0x40) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x3, 0x0, 0xffffffffffffffff}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0xfffffffffffffffe) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="f21bc75509bf71c9d70236fc044842da97e87fd62c18b875c2357c6ed6000000000000000000000000002000e4ff00", 0x0, 0x48) ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) (async) r12 = eventfd2(0x9, 0x80000) write$eventfd(r12, &(0x7f0000000100)=0xffff, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1ab120, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 26m11.041736404s ago: executing program 2 (id=257): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0x5) close(0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb6) openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x244042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0xff, 0x86, 0x9, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x4, 0x0, 0x3, 0x5, 0x8, '\x00', 0x9, 0x93}) write$eventfd(r8, &(0x7f00000001c0)=0x3, 0xfdef) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000100)={0x0, 0x0}, 0x0, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r13, 0x3, 0x11, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r13, 0x1, 0x12, r9, 0x0) mmap$KVM_VCPU(&(0x7f0000d40000/0x4000)=nil, r13, 0x1, 0x100911, r3, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 26m1.884395909s ago: executing program 3 (id=258): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x280000b, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b8540003000000000000001ce16f8f1f449a7a8356732f2b54ebb2aa76c869d22627e700000600", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x230000, 0x1f01) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, 0x0, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013df02, &(0x7f00000000c0)=0xa0}) (async) r11 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x1, 0x304, &(0x7f00000001c0)=0x7}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2a) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000340)=[@featur2={0x1, 0x4}], 0x1) 25m56.894659087s ago: executing program 2 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0), 0xe80) ioctl$KVM_CREATE_VM(r2, 0x5761, 0x2000001c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r6, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ebf000/0x1000)=nil, r6, 0xa, 0x1c013, r9, 0x0) 25m51.282862341s ago: executing program 3 (id=260): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) close(r2) 25m10.869720028s ago: executing program 34 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)={0x3, "e0b52f"}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0), 0xe80) ioctl$KVM_CREATE_VM(r2, 0x5761, 0x2000001c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) (async) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r6, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ebf000/0x1000)=nil, r6, 0xa, 0x1c013, r9, 0x0) 25m4.018213316s ago: executing program 35 (id=260): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) close(r2) 17m9.505965855s ago: executing program 5 (id=264): r0 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @generic={0x2, 0xa78, 0x0, 0x3}}, @irq_setup={0x46, 0x18, {0x4, 0x188}}, @code={0xa, 0xe4, {"a0979dd20020b8f2c10180d2620080d2430180d2c40080d2020000d4e07f92d200e0b0f2c10080d2220180d2230180d2240080d2020000d4804494d20020b0f2610180d2820080d2230080d2c40080d2020000d4a06e81d20020b0f2810080d2220080d2830080d2040080d2020000d4a06885d20020b8f2210180d2820080d2830080d2040080d2020000d400000029405282d20040b0f2010180d2a20180d2030080d2640180d2020000d4806e80d200c0b0f2010080d2020080d2030080d2040080d2020000d4000028d500b4205e"}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x1}}, @uexit={0x0, 0x18, 0x81}, @smc={0x1e, 0x40, {0x0, [0x101, 0x8a, 0x5, 0x5, 0x7]}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x154}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x2, 0x1, 0x6, 0x81, 0x4}}, @code={0xa, 0x54, {"e003bfd60004000f008008d5000028d5007008d5007008d5008008d50008407aa0ef9cd20060b8f2810080d2420080d2430180d2c40180d2020000d4000040b3"}}, @irq_setup={0x46, 0x18, {0x1, 0x2}}, @msr={0x14, 0x20, {0x603000000013c3a0, 0x6}}, @svc={0x122, 0x40, {0xc400000e, [0x3, 0x7fffffffffffffff, 0x8, 0x6, 0x7]}}, @memwrite={0x6e, 0x30, @generic={0xb000, 0x783, 0x3, 0x1}}, @smc={0x1e, 0x40, {0x86000001, [0xe5d, 0x4, 0x3, 0xfffffffffffffff9]}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x5}, @msr={0x14, 0x20, {0x603000000013e669, 0x7}}, @eret={0xe6, 0x18, 0xf800}, @irq_setup={0x46, 0x18, {0x2, 0x129}}, @msr={0x14, 0x20, {0x603000000013de99, 0x5}}, @eret={0xe6, 0x18}, @its_send_cmd={0xaa, 0x28, {0x0, 0x0, 0x4, 0x3, 0x80, 0x4, 0x1}}], 0x420}, &(0x7f00000006c0)=[@featur2={0x1, 0x20}], 0x1) ioctl$KVM_ARM_VCPU_INIT(r0, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c038, 0x0}) ioctl$KVM_CREATE_VM(r7, 0x401c5820, 0x20000006) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r10}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r10}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x9, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x807}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x7}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 16m52.932886999s ago: executing program 5 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x40000000000001, 0x4, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x1, 0x80000, 0x10007, 0x0, 0x0, 0x2}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x400454da, 0x2f) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x8001}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r13, 0x4008ae61, &(0x7f0000000080)={0x0, 0xffffff6f}) ioctl$KVM_IRQ_LINE(r13, 0x4008ae61, &(0x7f00000001c0)={0x0, 0xffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000240)=0x8080000}) r14 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x2f) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0xffffffff, 0x80080, 0x0}) 16m51.413057438s ago: executing program 4 (id=266): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r2 = syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000140)={0x2, 0x4, 0xf000, 0x1000, &(0x7f0000e21000/0x1000)=nil, 0x0, r5}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r5}) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0xff, 0xfffffffffffffffd, &(0x7f0000000040)=0xb59}) 16m37.03381267s ago: executing program 4 (id=267): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0xc00000000000000) 16m30.93730579s ago: executing program 5 (id=268): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000200), 0x20900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c0c000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000080)={0x1fe, 0x6, 0x60000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0xffffeffffffffffa, r11}) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r14, 0x100000d, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000cf6000/0x3000)=nil, r14, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) r15 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) r16 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) 16m21.953376222s ago: executing program 4 (id=269): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x1}}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x5, 0x2, 0x3]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000300)={0x8001, 0x55e, 0x1}}) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}], 0x20}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_kvm_vgic_v3_setup(r1, 0x1, 0x80) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000000)=0x80}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r16 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) r17 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x1800002, 0x11, r16, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r17, 0x20, &(0x7f0000000180)="f30138dd56bf00e2004b584bd92e00000f00000000000100010000020000000083f402000000235acbd98700000000000200", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r16, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r15, 0x40305839, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x100000000000000, 0x0}) 16m1.000162686s ago: executing program 5 (id=270): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013e7fc, 0x8000}}], 0x20}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) (async, rerun: 32) close(0xffffffffffffffff) (rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000080)="fb4149dd033be3ac2ca5a22332a70000000000000071b14c94a6ab8031d1dfd90f05000000010000521ce16f8f1f449a7a8356733169d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f00000002c0)=@arm64_sve={0x60800000001500b3, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) (async, rerun: 32) r11 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r14, 0x4010aeac, &(0x7f00000000c0)=@arm64_fp_extra={0x60200000001000d4, 0xffffffffffffffff}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 16m0.573080908s ago: executing program 4 (id=271): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0xa, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x5d) 15m46.17447191s ago: executing program 4 (id=272): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x52) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x603000000010002e, &(0x7f0000000040)=0x8000000000000005}) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r8, 0x0) r10 = eventfd2(0x2, 0x80001) close(r10) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) write$eventfd(r10, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) r11 = eventfd2(0x0, 0x0) close(r11) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x593402, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x2000004, 0x2011, r11, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000180)={0x6}) 15m43.837015194s ago: executing program 5 (id=273): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x2, 0x6}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000000) 15m27.484430462s ago: executing program 5 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcd) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc2000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0xc5000020, [0x6, 0x6, 0x1, 0x711ec83f, 0x6]}}], 0x40}, &(0x7f0000000480)=[@featur2], 0x1) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2d) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000180)={0x3, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r12, 0x4004aec2, &(0x7f00000001c0)=0x4) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0}) r13 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010000a, &(0x7f0000000100)=0xc5c9}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x2, 0x0, 0x0, @msi={0x8001, 0x5, 0x0, 0x7}}]}) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000000)={0x5, 0x80000001}) 15m23.18778545s ago: executing program 4 (id=275): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x97}}, @hvc={0x32, 0x40, {0x84000052, [0x3, 0x10, 0x4, 0x80, 0x8]}}, @eret={0xe6, 0x18, 0x3ff}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x9, 0x4, 0x5, 0x2}}, @msr={0x14, 0x20, {0x603000000013da28, 0x9}}, @msr={0x14, 0x20, {0x603000000013e6d4, 0xc4c}}, @msr={0x14, 0x20, {0x603000000013c608, 0xd}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xd00, 0x9, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0x9, 0xfffffffd, 0x0, 0x1}}, @eret={0xe6, 0x18, 0x1}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1e3}}, @irq_setup={0x46, 0x18, {0x1, 0x2dd}}, @hvc={0x32, 0x40, {0x0, [0x8001, 0x9, 0x80, 0x3, 0x81]}}, @code={0xa, 0x9c, {"007008d5007008d5000008d5003286d20080b8f2410180d2c20080d2230080d2240080d2020000d4000028d50000641ec0bb9ed20080b8f2a10180d2820180d2630180d2840080d2020000d460768dd200c0b0f2810080d2e20080d2030080d2240080d2020000d400de91d20000b0f2210080d2020180d2830180d2c40180d2020000d4008008d5"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x332}}, @msr={0x14, 0x20, {0x603000000013df4f, 0x6}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0x8, 0x7, 0x0, 0x4}}, @uexit={0x0, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013dead, 0xfff}}, @irq_setup={0x46, 0x18, {0x0, 0x24e}}], 0x36c}, &(0x7f0000000780)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000007c0)={0x0, 0xa0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0xff72, 0x10}}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) syz_kvm_add_vcpu$arm64(r8, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, 0x0) r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000000)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x20}) 14m40.231274225s ago: executing program 36 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcd) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000bc2000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=[@svc={0x122, 0x40, {0xc5000020, [0x6, 0x6, 0x1, 0x711ec83f, 0x6]}}], 0x40}, &(0x7f0000000480)=[@featur2], 0x1) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2d) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r10, 0x4018aee2, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000180)={0x3, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r12, 0x4004aec2, &(0x7f00000001c0)=0x4) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve_vls={0x606000000015ffff, 0x0}) r13 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r4, r13, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r13, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010000a, &(0x7f0000000100)=0xc5c9}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0x0, 0x6a, 0x8, 0x5, 0x3}}, {0x3, 0x2, 0x0, 0x0, @msi={0x8001, 0x5, 0x0, 0x7}}]}) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000000)={0x5, 0x80000001}) 14m33.22334764s ago: executing program 37 (id=275): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f00000003c0)=[@its_setup={0x82, 0x28, {0x2, 0x1, 0x97}}, @hvc={0x32, 0x40, {0x84000052, [0x3, 0x10, 0x4, 0x80, 0x8]}}, @eret={0xe6, 0x18, 0x3ff}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0x9, 0x4, 0x5, 0x2}}, @msr={0x14, 0x20, {0x603000000013da28, 0x9}}, @msr={0x14, 0x20, {0x603000000013e6d4, 0xc4c}}, @msr={0x14, 0x20, {0x603000000013c608, 0xd}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0xd00, 0x9, 0x2}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0x9, 0xfffffffd, 0x0, 0x1}}, @eret={0xe6, 0x18, 0x1}, @eret={0xe6, 0x18, 0x9}, @its_setup={0x82, 0x28, {0x3, 0x2, 0x1e3}}, @irq_setup={0x46, 0x18, {0x1, 0x2dd}}, @hvc={0x32, 0x40, {0x0, [0x8001, 0x9, 0x80, 0x3, 0x81]}}, @code={0xa, 0x9c, {"007008d5007008d5000008d5003286d20080b8f2410180d2c20080d2230080d2240080d2020000d4000028d50000641ec0bb9ed20080b8f2a10180d2820180d2630180d2840080d2020000d460768dd200c0b0f2810080d2e20080d2030080d2240080d2020000d400de91d20000b0f2210080d2020180d2830180d2c40180d2020000d4008008d5"}}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x332}}, @msr={0x14, 0x20, {0x603000000013df4f, 0x6}}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0x8, 0x7, 0x0, 0x4}}, @uexit={0x0, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013dead, 0xfff}}, @irq_setup={0x46, 0x18, {0x0, 0x24e}}], 0x36c}, &(0x7f0000000780)=[@featur1={0x1, 0x2}], 0x1) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f00000007c0)={0x0, 0xa0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r9, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0xff72, 0x10}}) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r4, 0x4010aeb5, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) syz_kvm_add_vcpu$arm64(r8, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, 0x0) r10 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x39d}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000000000)={0x0, 0xf000, 0x1, 0xffffffffffffffff, 0x20}) 3m14.404292776s ago: executing program 6 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 2m55.371428423s ago: executing program 6 (id=292): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@hvc={0x32, 0x40, {0x80007fff, [0x8001, 0x6e86, 0xfffffffffffffb11, 0x7, 0x1b5a752b]}}, @irq_setup={0x46, 0x18, {0x1, 0x22}}, @hvc={0x32, 0x40, {0xc4000011, [0x0, 0x0, 0x27, 0x9, 0x4]}}, @code={0xa, 0x84, {"a02492d20000b8f2a10080d2a20080d2030180d2440080d2020000d4007008d5007008d5602794d200c0b0f2410080d2220180d2c30180d2e40080d2020000d400d8307e003c207e007008d5000028d540049dd20080b8f2210180d2a20180d2430180d2a40180d2020000d4008008d5"}}, @mrs={0xbe, 0x18, {0x603000000013e208}}, @eret={0xe6, 0x18, 0x80000001}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x7, 0x6, 0x5, 0x18, 0x1}}, @irq_setup={0x46, 0x18, {0x4, 0x3c8}}, @code={0xa, 0x84, {"0028c01a0084800d000028d5600693d20080b8f2410180d2620180d2830180d2e40180d2020000d40000206a007008d5007008d560f888d200c0b8f2e10080d2620180d2a30180d2c40080d2020000d460ee9dd20020b0f2e10180d2220080d2630180d2640080d2020000d400c0005f"}}, @code={0xa, 0x6c, {"404c80d20060b0f2610080d2820080d2430080d2840080d2020000d40074000f0030200e006885d20060b8f2210180d2a20180d2c30080d2a40080d2020000d4002c205e00d8a17e007008d500a09f0c008008d5008008d5"}}, @msr={0x14, 0x20, {0x603000000013de93, 0x8000}}], 0x29c}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe1) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) r8 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x109272, 0x1f01) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x9}) r9 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r11}) r12 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r16 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r15, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r16, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) 2m50.603159816s ago: executing program 7 (id=293): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x51d987bd, 0x0, 0x0, r2, 0xa}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x1000000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000e8c000/0x1000)=nil, 0x930, 0x3000009, 0x4000010, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x4068aea3, &(0x7f0000000140)) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)=0x7fff}) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) 2m30.614221319s ago: executing program 6 (id=294): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000e65000/0x4000)=nil, r4, 0x3000002, 0x110, r2, 0x0) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x93}) (async, rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0xffffffff}) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0xfdef) (async) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff}) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0xa983453cd6cf818b, 0x0, 0x6000, 0x2000, &(0x7f0000e65000/0x2000)=nil}) 2m27.233593993s ago: executing program 7 (id=295): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x100000000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000080)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r3}) r4 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xc0189436, 0x1ffffffc) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x62) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000c61000/0x2000)=nil, r10, 0x2000001, 0x10, r5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 2m8.044351091s ago: executing program 7 (id=296): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000380)}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000000)=0xbffffffffffffffc}) (async) syz_kvm_setup_cpu$arm64(r3, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000180)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000080)={0x1ff, 0x3, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000}) (async) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r9, 0x4018aee3, &(0x7f0000000200)=@attr_pmu_init) r10 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) r12 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x603000000013d000}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m6.972866152s ago: executing program 6 (id=297): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce4, 0x7}}], 0x40}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x2000006, 0x2013, r9, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x5, 0x8080000, 0x2, r11, 0x8}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r11, 0x2}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r11, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000c, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000001c0)="fb0149dd833be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8faa767969d22627e700", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a97f2, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) 1m41.606898406s ago: executing program 7 (id=298): ioctl$KVM_SET_GUEST_DEBUG_arm64(0xffffffffffffffff, 0x4208ae9b, &(0x7f0000000040)={0x20003, 0x0, {[0x7, 0x5, 0xb598000000000000, 0x200, 0xfb, 0xfffffffffffffff6, 0x6698, 0x1, 0x8, 0x9, 0x7, 0x6, 0x3, 0x5, 0x7f8000, 0x5], [0x9, 0x6, 0x2, 0x44, 0x100000001, 0x40, 0x1000007fc, 0x2, 0x0, 0x6, 0xffffffff, 0x9, 0x2, 0xc, 0x8, 0xffffffffffffff00], [0xb, 0x8a9, 0x1, 0x2, 0x7, 0x5, 0x3, 0xf9, 0x200, 0x1, 0xd, 0x6, 0x101, 0x2000000000000001, 0x10c, 0x9], [0x35aa36e5, 0x8, 0x7, 0xf, 0x9, 0x0, 0xc4, 0x7f, 0x7fffffffffffffff, 0x9, 0xfffffffffffffff8, 0x2, 0x4000000000007, 0xfffffffffffffff9, 0x7, 0x60000]}}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)=@riscv64_sbi_sta={0x803000000a000001, 0x0}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000002c0)=@x86={0xa, 0x65, 0x80, 0x0, 0x3, 0x6, 0xcc, 0x5, 0x9, 0x2b, 0x8, 0xa, 0x0, 0x400c1, 0x5, 0x3, 0x8, 0xf9, 0x6, '\x00', 0x7}) write$eventfd(r6, &(0x7f00000001c0)=0x3, 0xfdef) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x7}) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000340)=0x401, 0x8) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000300)=@attr_other={0x0, 0x4, 0x1, 0x0}) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) 1m35.577456711s ago: executing program 6 (id=299): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x20002, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f0000136000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f70000/0x1000)=nil, 0x1000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f00009f4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e4c000/0x4000)=nil, 0x4000) munmap(&(0x7f0000967000/0x2000)=nil, 0x2000) munmap(&(0x7f00007f5000/0xe000)=nil, 0xe000) munmap(&(0x7f0000d04000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f83000/0x1000)=nil, 0x1000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000270000/0x1000)=nil, 0x1000) munmap(&(0x7f0000c12000/0x3000)=nil, 0x3000) munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r3, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000c82000/0x2000)=nil, r3, 0x2, 0x810, r4, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2000006, 0x70000, 0x2, 0xffffffffffffffff, 0xa}) 1m21.174194817s ago: executing program 7 (id=300): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013c522}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_kvm_vgic_v3_setup(r7, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x3, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0xb, 0x5, &(0x7f0000000040)=0x9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_ARM_VCPU_FINALIZE(r12, 0x4004aec2, &(0x7f00000001c0)=0x4) openat$kvm(0x0, 0x0, 0x0, 0x0) close(0x4) close(0x5) r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r14, 0x401054d5, 0x16) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000b7c000/0x400000)=nil) 1m10.464625272s ago: executing program 6 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x7}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x1fe, 0x1, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x9, 0x5, &(0x7f0000000000)=0x16}) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x4c583, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) eventfd2(0x0, 0x0) eventfd2(0x8801, 0x800) eventfd2(0x3ff, 0x0) 51.354789169s ago: executing program 7 (id=302): r0 = openat$kvm(0x0, &(0x7f0000000080), 0xc0200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x400701, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000200)={0x10004, 0x0, &(0x7f0000c2e000/0x3000)=nil}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000540)=[@msr={0x14, 0x20, {0x603000000013c01a, 0x683d9b15}}, @svc={0x122, 0x40, {0x6003fe0, [0xb5, 0x1, 0xb852, 0x87, 0x10001]}}, @irq_setup={0x46, 0x18, {0x1, 0x16e}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x10, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x3cb}}, @msr={0x14, 0x20, {0x603000000013d920, 0xaf6f}}, @hvc={0x32, 0x40, {0x80000000, [0x4, 0xfffffffffffffffe, 0x54a, 0x100, 0x7]}}, @hvc={0x32, 0x40, {0x84000004, [0x6, 0x5, 0x2, 0x40000b, 0x6]}}, @code={0xa, 0x84, {"00ad86d200c0b0f2810180d2820080d2830080d2a40180d2020000d400f4a02e00048038a0339ad20000b0f2810180d2620180d2c30180d2240080d2020000d40004c03800849f0d000028d5007008d50010805f20af97d20080b8f2c10080d2220180d2c30080d2e40080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e08d}}, @svc={0x122, 0x40, {0x80007fff, [0x1, 0x20f4, 0x1, 0x117cda4e, 0x9]}}], 0x23c}, &(0x7f0000000500)=[@featur2={0x1, 0x24}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r14 = syz_kvm_vgic_v3_setup(r12, 0x2000000000001, 0x60) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000000)=0x2}) r15 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_GET_REG_LIST(r15, 0x4020aeae, &(0x7f0000000000)={0x5, [0x0, 0x0, 0xfc, 0x52, 0x4]}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r15, 0x4208ae9b, &(0x7f0000000040)={0x30002, 0x0, {[0x80000001, 0x101, 0x2, 0x4, 0xb, 0x100000001, 0xc9, 0x6974, 0x100000000, 0x68, 0x7, 0x4, 0x24706e95, 0x5, 0x6, 0xfffffffffffffff8], [0x1, 0x61736be9, 0x1000, 0x1000, 0x7ff, 0x9aff, 0xbac, 0x401, 0x9, 0xa16, 0x7, 0xe9ce, 0x0, 0x1, 0x0, 0x200], [0x1, 0xffffffffffffffa0, 0x8, 0x100000001, 0xffffffffffffffff, 0xc, 0x41d7, 0x0, 0x8001, 0x7fff, 0x0, 0x100, 0x7, 0x5d, 0x5, 0x8], [0x2, 0x7, 0x7, 0x5, 0x100000001, 0xb, 0x5, 0x4, 0x8000000000000001, 0x800, 0xdfb, 0x101, 0x2, 0xfffffffffffffffc, 0x42c, 0xe]}}) ioctl$KVM_GET_REG_LIST(r8, 0xc008aeb0, &(0x7f0000000380)={0x9, [0xfff, 0x0, 0xe0, 0x3, 0xb8, 0x54d3, 0x80000080000001, 0x1, 0x0]}) ioctl$KVM_RUN(r15, 0xae80, 0x0) 22.424063911s ago: executing program 38 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x7}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x1fe, 0x1, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x9, 0x5, &(0x7f0000000000)=0x16}) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x4c583, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x4}) syz_kvm_setup_cpu$arm64(r6, 0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil, &(0x7f0000000140)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x100, &(0x7f0000000080)=0x8000000000000000}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000280)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000300)="fb4149dd033b8986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67525673312b01040000000000002627e7000000000000000200", 0x0, 0xfffffffffffffe73) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x12, r9, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) eventfd2(0x0, 0x0) eventfd2(0x8801, 0x800) eventfd2(0x3ff, 0x0) 0s ago: executing program 39 (id=302): r0 = openat$kvm(0x0, &(0x7f0000000080), 0xc0200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x400701, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000200)={0x10004, 0x0, &(0x7f0000c2e000/0x3000)=nil}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) ioctl$KVM_CAP_ARM_MTE(r7, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x0, 0x10c000, 0x1}) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000540)=[@msr={0x14, 0x20, {0x603000000013c01a, 0x683d9b15}}, @svc={0x122, 0x40, {0x6003fe0, [0xb5, 0x1, 0xb852, 0x87, 0x10001]}}, @irq_setup={0x46, 0x18, {0x1, 0x16e}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x10, 0x4}}, @irq_setup={0x46, 0x18, {0x4, 0x3cb}}, @msr={0x14, 0x20, {0x603000000013d920, 0xaf6f}}, @hvc={0x32, 0x40, {0x80000000, [0x4, 0xfffffffffffffffe, 0x54a, 0x100, 0x7]}}, @hvc={0x32, 0x40, {0x84000004, [0x6, 0x5, 0x2, 0x40000b, 0x6]}}, @code={0xa, 0x84, {"00ad86d200c0b0f2810180d2820080d2830080d2a40180d2020000d400f4a02e00048038a0339ad20000b0f2810180d2620180d2c30180d2240080d2020000d40004c03800849f0d000028d5007008d50010805f20af97d20080b8f2c10080d2220180d2c30080d2e40080d2020000d4"}}, @mrs={0xbe, 0x18, {0x603000000013e08d}}, @svc={0x122, 0x40, {0x80007fff, [0x1, 0x20f4, 0x1, 0x117cda4e, 0x9]}}], 0x23c}, &(0x7f0000000500)=[@featur2={0x1, 0x24}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x80000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r13, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r14 = syz_kvm_vgic_v3_setup(r12, 0x2000000000001, 0x60) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x4, &(0x7f0000000000)=0x2}) r15 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_GET_REG_LIST(r15, 0x4020aeae, &(0x7f0000000000)={0x5, [0x0, 0x0, 0xfc, 0x52, 0x4]}) ioctl$KVM_SET_GUEST_DEBUG_arm64(r15, 0x4208ae9b, &(0x7f0000000040)={0x30002, 0x0, {[0x80000001, 0x101, 0x2, 0x4, 0xb, 0x100000001, 0xc9, 0x6974, 0x100000000, 0x68, 0x7, 0x4, 0x24706e95, 0x5, 0x6, 0xfffffffffffffff8], [0x1, 0x61736be9, 0x1000, 0x1000, 0x7ff, 0x9aff, 0xbac, 0x401, 0x9, 0xa16, 0x7, 0xe9ce, 0x0, 0x1, 0x0, 0x200], [0x1, 0xffffffffffffffa0, 0x8, 0x100000001, 0xffffffffffffffff, 0xc, 0x41d7, 0x0, 0x8001, 0x7fff, 0x0, 0x100, 0x7, 0x5d, 0x5, 0x8], [0x2, 0x7, 0x7, 0x5, 0x100000001, 0xb, 0x5, 0x4, 0x8000000000000001, 0x800, 0xdfb, 0x101, 0x2, 0xfffffffffffffffc, 0x42c, 0xe]}}) ioctl$KVM_GET_REG_LIST(r8, 0xc008aeb0, &(0x7f0000000380)={0x9, [0xfff, 0x0, 0xe0, 0x3, 0xb8, 0x54d3, 0x80000080000001, 0x1, 0x0]}) ioctl$KVM_RUN(r15, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 403.368346][ T3171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.153578][ T3171] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:26859' (ED25519) to the list of known hosts. [ 619.237534][ T24] audit: type=1400 audit(618.400:61): avc: denied { name_bind } for pid=3330 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 620.219199][ T24] audit: type=1400 audit(619.370:62): avc: denied { execute } for pid=3331 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 620.252601][ T24] audit: type=1400 audit(619.400:63): avc: denied { execute_no_trans } for pid=3331 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 649.279093][ T24] audit: type=1400 audit(648.440:64): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 649.323307][ T24] audit: type=1400 audit(648.480:65): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 649.410607][ T3331] cgroup: Unknown subsys name 'net' [ 649.468723][ T24] audit: type=1400 audit(648.640:66): avc: denied { unmount } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 649.906605][ T3331] cgroup: Unknown subsys name 'cpuset' [ 650.023696][ T3331] cgroup: Unknown subsys name 'rlimit' [ 650.927800][ T24] audit: type=1400 audit(650.090:67): avc: denied { setattr } for pid=3331 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.951624][ T24] audit: type=1400 audit(650.120:68): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 650.969197][ T24] audit: type=1400 audit(650.130:69): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 652.028465][ T3335] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 652.049323][ T24] audit: type=1400 audit(651.210:70): avc: denied { relabelto } for pid=3335 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 652.087187][ T24] audit: type=1400 audit(651.240:71): avc: denied { write } for pid=3335 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 652.270681][ T24] audit: type=1400 audit(651.430:72): avc: denied { read } for pid=3331 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 652.292743][ T24] audit: type=1400 audit(651.460:73): avc: denied { open } for pid=3331 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 652.335465][ T3331] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 710.236656][ T24] audit: type=1400 audit(709.400:74): avc: denied { execmem } for pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 714.126305][ T24] audit: type=1400 audit(713.290:75): avc: denied { read } for pid=3340 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 714.152921][ T24] audit: type=1400 audit(713.320:76): avc: denied { open } for pid=3339 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 714.229423][ T24] audit: type=1400 audit(713.400:77): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 714.480415][ T24] audit: type=1400 audit(713.630:78): avc: denied { module_request } for pid=3339 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 715.483741][ T24] audit: type=1400 audit(714.650:79): avc: denied { sys_module } for pid=3340 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 738.743517][ T3340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.189489][ T3340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.257707][ T3339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.539152][ T3339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.834135][ T3340] hsr_slave_0: entered promiscuous mode [ 751.863950][ T3340] hsr_slave_1: entered promiscuous mode [ 752.803475][ T3339] hsr_slave_0: entered promiscuous mode [ 752.877484][ T3339] hsr_slave_1: entered promiscuous mode [ 752.916663][ T3339] debugfs: 'hsr0' already exists in 'hsr' [ 752.936506][ T3339] Cannot create hsr debugfs directory [ 761.168422][ T24] audit: type=1400 audit(760.330:80): avc: denied { create } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.197149][ T24] audit: type=1400 audit(760.360:81): avc: denied { write } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.276982][ T24] audit: type=1400 audit(760.430:82): avc: denied { read } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 761.472507][ T3340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 762.059206][ T3340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.463931][ T3340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 762.784259][ T3340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 766.272694][ T3339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.692815][ T3339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 767.102047][ T3339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 767.424076][ T3339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 784.356971][ T3340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.575971][ T3339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.069515][ T3340] veth0_vlan: entered promiscuous mode [ 842.699580][ T3340] veth1_vlan: entered promiscuous mode [ 844.713150][ T3340] veth0_macvtap: entered promiscuous mode [ 845.161704][ T3340] veth1_macvtap: entered promiscuous mode [ 845.352402][ T3339] veth0_vlan: entered promiscuous mode [ 846.328074][ T3339] veth1_vlan: entered promiscuous mode [ 847.883947][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.892711][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.907641][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.004130][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.872171][ T3339] veth0_macvtap: entered promiscuous mode [ 850.478475][ T3339] veth1_macvtap: entered promiscuous mode [ 850.606710][ T24] audit: type=1400 audit(849.720:83): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 850.787822][ T24] audit: type=1400 audit(849.950:84): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.EeoKfj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 851.041924][ T24] audit: type=1400 audit(850.190:85): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 851.442360][ T24] audit: type=1400 audit(850.610:86): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.EeoKfj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 851.561355][ T24] audit: type=1400 audit(850.730:87): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/syzkaller.EeoKfj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 852.209520][ T24] audit: type=1400 audit(851.380:88): avc: denied { unmount } for pid=3340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 852.470336][ T24] audit: type=1400 audit(851.630:89): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 852.660900][ T21] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.668529][ T24] audit: type=1400 audit(851.830:90): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="gadgetfs" ino=3754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 852.686050][ T21] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.715987][ T21] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.719891][ T21] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.088818][ T24] audit: type=1400 audit(852.260:91): avc: denied { mount } for pid=3340 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 853.179432][ T24] audit: type=1400 audit(852.310:92): avc: denied { mounton } for pid=3340 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 854.879896][ T3340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 855.926859][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 855.941958][ T24] audit: type=1400 audit(855.080:94): avc: denied { read write } for pid=3340 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 856.007183][ T24] audit: type=1400 audit(855.130:95): avc: denied { open } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 856.031556][ T24] audit: type=1400 audit(855.170:96): avc: denied { ioctl } for pid=3340 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 865.924294][ T24] audit: type=1400 audit(865.090:97): avc: denied { read } for pid=3495 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 865.988468][ T24] audit: type=1400 audit(865.150:98): avc: denied { open } for pid=3495 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.247413][ T24] audit: type=1400 audit(865.410:99): avc: denied { ioctl } for pid=3495 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.300347][ T24] audit: type=1400 audit(865.470:100): avc: denied { map } for pid=3495 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.342178][ T24] audit: type=1400 audit(865.510:101): avc: denied { write execute } for pid=3495 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 870.699070][ T24] audit: type=1400 audit(869.850:102): avc: denied { ioctl } for pid=3497 comm="syz.0.1" path="net:[4026532640]" dev="nsfs" ino=4026532640 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 955.210957][ T24] audit: type=1400 audit(954.380:103): avc: denied { execute } for pid=3548 comm="syz.0.16" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1013.196251][ T24] audit: type=1400 audit(1012.340:104): avc: denied { append } for pid=3588 comm="syz.1.26" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1036.141293][ T24] audit: type=1400 audit(1035.260:105): avc: denied { create } for pid=3603 comm="syz.1.30" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1165.570198][ T24] audit: type=1400 audit(1164.730:106): avc: denied { setattr } for pid=3667 comm="syz.0.51" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1309.911609][ T3692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.060451][ T3692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.103604][ T3694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.310269][ T3694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.902173][ T3692] hsr_slave_0: entered promiscuous mode [ 1338.951022][ T3692] hsr_slave_1: entered promiscuous mode [ 1339.027902][ T3692] debugfs: 'hsr0' already exists in 'hsr' [ 1339.031498][ T3692] Cannot create hsr debugfs directory [ 1341.572418][ T3694] hsr_slave_0: entered promiscuous mode [ 1341.662071][ T3694] hsr_slave_1: entered promiscuous mode [ 1341.746681][ T3694] debugfs: 'hsr0' already exists in 'hsr' [ 1341.765749][ T3694] Cannot create hsr debugfs directory [ 1362.701722][ T3422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.753582][ T3422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.912233][ T3422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.069816][ T3422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.613810][ T3694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1367.049983][ T3694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1367.628865][ T3694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1368.889084][ T3694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1376.379090][ T3692] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1376.793359][ T3692] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1386.152102][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.420851][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.543726][ T3422] bond0 (unregistering): Released all slaves [ 1386.782110][ T3692] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1387.281770][ T3692] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1388.127131][ T3422] hsr_slave_0: left promiscuous mode [ 1388.218179][ T3422] hsr_slave_1: left promiscuous mode [ 1388.766604][ T3422] veth1_macvtap: left promiscuous mode [ 1388.768216][ T3422] veth0_macvtap: left promiscuous mode [ 1388.781890][ T3422] veth1_vlan: left promiscuous mode [ 1388.817932][ T3422] veth0_vlan: left promiscuous mode [ 1416.142234][ T3422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.881343][ T3422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.201332][ T3422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.451799][ T3422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.482792][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.768637][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.948204][ T3422] bond0 (unregistering): Released all slaves [ 1445.096581][ T3422] hsr_slave_0: left promiscuous mode [ 1445.427325][ T3422] hsr_slave_1: left promiscuous mode [ 1446.376221][ T3422] veth1_macvtap: left promiscuous mode [ 1446.377224][ T3422] veth0_macvtap: left promiscuous mode [ 1446.388899][ T3422] veth1_vlan: left promiscuous mode [ 1446.397206][ T3422] veth0_vlan: left promiscuous mode [ 1464.300337][ T3694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.600865][ T3692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.262694][ T3694] veth0_vlan: entered promiscuous mode [ 1561.198291][ T3694] veth1_vlan: entered promiscuous mode [ 1565.544585][ T3694] veth0_macvtap: entered promiscuous mode [ 1566.282105][ T3692] veth0_vlan: entered promiscuous mode [ 1566.851294][ T3694] veth1_macvtap: entered promiscuous mode [ 1568.573204][ T3692] veth1_vlan: entered promiscuous mode [ 1572.374257][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.380368][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.400571][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.494173][ T3789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.283947][ T3692] veth0_macvtap: entered promiscuous mode [ 1575.369743][ T3692] veth1_macvtap: entered promiscuous mode [ 1578.517531][ T24] audit: type=1400 audit(1577.670:107): avc: denied { unmount } for pid=3694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1579.613392][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.641098][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.708426][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.713462][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.582702][ T4443] kvm [4443]: Failed to find VMA for hva 0x20c01000 [ 2663.869236][ T4490] kvm [4490]: Failed to find VMA for hva 0x20d8d000 [ 2982.932577][ T24] audit: type=1400 audit(2982.070:108): avc: denied { map } for pid=4665 comm="syz.3.243" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=18503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2982.993045][ T24] audit: type=1400 audit(2982.160:109): avc: denied { read } for pid=4665 comm="syz.3.243" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=18503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3214.092802][ T4732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3214.491897][ T4732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3220.782569][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3221.240821][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3253.468210][ T4732] hsr_slave_0: entered promiscuous mode [ 3253.571189][ T4732] hsr_slave_1: entered promiscuous mode [ 3259.591008][ T4736] hsr_slave_0: entered promiscuous mode [ 3259.630225][ T4736] hsr_slave_1: entered promiscuous mode [ 3259.729321][ T4736] debugfs: 'hsr0' already exists in 'hsr' [ 3259.739349][ T4736] Cannot create hsr debugfs directory [ 3281.578992][ T4732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3282.434315][ T4732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3283.743336][ T4732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3285.599255][ T4732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3291.863420][ T4736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3292.787251][ T4736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3293.369325][ T4736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3293.854595][ T4736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3329.684665][ T4732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3334.502879][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3365.671511][ T21] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3367.537891][ T21] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3368.971025][ T21] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3370.779332][ T21] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.573605][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3390.723316][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3390.892329][ T21] bond0 (unregistering): Released all slaves [ 3392.877720][ T21] hsr_slave_0: left promiscuous mode [ 3393.093077][ T21] hsr_slave_1: left promiscuous mode [ 3393.620319][ T21] veth1_macvtap: left promiscuous mode [ 3393.627782][ T21] veth0_macvtap: left promiscuous mode [ 3393.634359][ T21] veth1_vlan: left promiscuous mode [ 3393.667549][ T21] veth0_vlan: left promiscuous mode [ 3423.774300][ T21] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.394635][ T21] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.572380][ T21] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3430.856356][ T21] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3453.461501][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3453.897338][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3454.320994][ T21] bond0 (unregistering): Released all slaves [ 3456.723484][ T21] hsr_slave_0: left promiscuous mode [ 3456.839723][ T21] hsr_slave_1: left promiscuous mode [ 3457.369641][ T21] veth1_macvtap: left promiscuous mode [ 3457.381544][ T21] veth0_macvtap: left promiscuous mode [ 3457.393677][ T21] veth1_vlan: left promiscuous mode [ 3457.407201][ T21] veth0_vlan: left promiscuous mode [ 3566.096844][ T4732] veth0_vlan: entered promiscuous mode [ 3566.508263][ T4736] veth0_vlan: entered promiscuous mode [ 3567.904379][ T4732] veth1_vlan: entered promiscuous mode [ 3568.660103][ T4736] veth1_vlan: entered promiscuous mode [ 3573.249427][ T4732] veth0_macvtap: entered promiscuous mode [ 3573.390991][ T4736] veth0_macvtap: entered promiscuous mode [ 3574.137293][ T4732] veth1_macvtap: entered promiscuous mode [ 3574.343687][ T4736] veth1_macvtap: entered promiscuous mode [ 3578.872752][ T3789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3578.878918][ T3789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3578.920338][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3578.956786][ T4824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3579.319751][ T4847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3579.505763][ T3789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3579.509707][ T3789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3579.557018][ T3789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3808.951386][ T4424] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3811.270588][ T4424] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3813.730495][ T4424] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3815.902096][ T4424] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3839.408136][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3839.661451][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3839.848311][ T4424] bond0 (unregistering): Released all slaves [ 3843.437149][ T4424] hsr_slave_0: left promiscuous mode [ 3843.808171][ T4424] hsr_slave_1: left promiscuous mode [ 3844.516338][ T4424] veth1_macvtap: left promiscuous mode [ 3844.517360][ T4424] veth0_macvtap: left promiscuous mode [ 3844.559033][ T4424] veth1_vlan: left promiscuous mode [ 3844.581290][ T4424] veth0_vlan: left promiscuous mode [ 3876.743841][ T4424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3878.127300][ T4424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3879.188798][ T4424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3880.804006][ T4424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3907.332489][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3907.689129][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3908.026798][ T4424] bond0 (unregistering): Released all slaves [ 3911.089346][ T4424] hsr_slave_0: left promiscuous mode [ 3911.179515][ T4424] hsr_slave_1: left promiscuous mode [ 3912.109112][ T4424] veth1_macvtap: left promiscuous mode [ 3912.116726][ T4424] veth0_macvtap: left promiscuous mode [ 3912.128701][ T4424] veth1_vlan: left promiscuous mode [ 3912.154206][ T4424] veth0_vlan: left promiscuous mode [ 3965.969470][ T5036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3966.321659][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3966.631013][ T5036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3966.839106][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4000.581959][ T5036] hsr_slave_0: entered promiscuous mode [ 4000.733463][ T5036] hsr_slave_1: entered promiscuous mode [ 4004.432689][ T5032] hsr_slave_0: entered promiscuous mode [ 4004.533030][ T5032] hsr_slave_1: entered promiscuous mode [ 4004.578042][ T5032] debugfs: 'hsr0' already exists in 'hsr' [ 4004.581009][ T5032] Cannot create hsr debugfs directory [ 4028.363811][ T5036] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4029.253337][ T5036] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4030.016914][ T5036] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4031.013002][ T5036] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4039.260732][ T5032] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4039.843103][ T5032] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4040.547469][ T5032] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4041.122249][ T5032] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4070.049336][ T5036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4078.182418][ T5032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4238.761732][ T5036] veth0_vlan: entered promiscuous mode [ 4240.209908][ T5036] veth1_vlan: entered promiscuous mode [ 4244.731404][ T5036] veth0_macvtap: entered promiscuous mode [ 4245.760541][ T5036] veth1_macvtap: entered promiscuous mode [ 4247.538806][ T5032] veth0_vlan: entered promiscuous mode [ 4250.058987][ T5032] veth1_vlan: entered promiscuous mode [ 4252.644110][ T3766] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4252.690220][ T4845] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4252.719500][ T4845] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4252.782402][ T5256] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4259.339083][ T5032] veth0_macvtap: entered promiscuous mode [ 4260.974087][ T5032] veth1_macvtap: entered promiscuous mode [ 4267.138790][ T3766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4267.141606][ T3766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4267.179697][ T4824] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4267.449441][ T4824] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4780.609804][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4781.399694][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4805.520517][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4806.144578][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4847.802122][ T5432] hsr_slave_0: entered promiscuous mode [ 4848.070457][ T5432] hsr_slave_1: entered promiscuous mode [ 4848.300862][ T5432] debugfs: 'hsr0' already exists in 'hsr' [ 4848.324404][ T5432] Cannot create hsr debugfs directory [ 4875.608908][ T5441] hsr_slave_0: entered promiscuous mode [ 4875.799469][ T5441] hsr_slave_1: entered promiscuous mode [ 4875.961353][ T5441] debugfs: 'hsr0' already exists in 'hsr' [ 4875.972598][ T5441] Cannot create hsr debugfs directory [ 4903.316737][ T5432] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4906.637353][ T5432] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4908.948944][ T5432] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4910.759294][ T5432] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4928.187357][ T5441] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4929.121554][ T5441] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4930.260054][ T5441] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4931.012361][ T5441] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4973.951220][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4991.841436][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5052.234202][ T26] INFO: task syz.7.302:5420 blocked for more than 430 seconds. [ 5052.280066][ T26] Not tainted syzkaller #0 [ 5052.357274][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5052.387263][ T26] task:syz.7.302 state:D stack:0 pid:5420 tgid:5420 ppid:5036 task_flags:0x400040 flags:0x00000011 [ 5052.388938][ T26] Call trace: [ 5052.389446][ T26] __switch_to+0x584/0xb00 (T) [ 5052.391775][ T26] __schedule+0x1da4/0x3678 [ 5052.392380][ T26] schedule+0xac/0x27c [ 5052.392935][ T26] schedule_timeout+0x68/0x1ec [ 5052.393892][ T26] do_wait_for_common+0x28c/0x440 [ 5052.394337][ T26] wait_for_completion+0x44/0x5c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5052.569766][ T26] __synchronize_srcu+0x2a4/0x320 [ 5052.570382][ T26] synchronize_srcu+0x3d0/0x4f8 [ 5052.570877][ T26] mmu_notifier_unregister+0x320/0x428 [ 5052.571382][ T26] kvm_put_kvm+0x698/0xbe0 [ 5052.571854][ T26] kvm_vm_release+0x58/0x78 [ 5052.572333][ T26] __fput+0x4ac/0x978 [ 5052.572865][ T26] ____fput+0x20/0x58 [ 5052.573377][ T26] task_work_run+0x1b8/0x250 [ 5052.573893][ T26] exit_to_user_mode_loop+0x110/0x188 [ 5052.574395][ T26] el0_svc+0x17c/0x238 [ 5052.742871][ T26] el0t_64_sync_handler+0x84/0x12c [ 5052.744068][ T26] el0t_64_sync+0x198/0x19c [ 5052.821226][ T26] [ 5052.821226][ T26] Showing all locks held in the system: [ 5052.821862][ T26] 1 lock held by khungtaskd/26: [ 5052.822283][ T26] #0: ffff800087c971f8 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x0/0x44 [ 5052.994562][ T26] 2 locks held by getty/3200: [ 5053.039414][ T26] #0: 24f00000127ce8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 5053.041377][ T26] #1: 24ff80008ca2b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x308/0x1234 [ 5053.043642][ T26] 2 locks held by syz-executor/3331: [ 5053.044034][ T26] 3 locks held by kworker/u4:8/3766: [ 5053.044367][ T26] 5 locks held by kworker/0:3/4199: [ 5053.177441][ T26] 3 locks held by kworker/u4:5/4424: [ 5053.178713][ T26] 2 locks held by kworker/u4:3/4743: [ 5053.179136][ T26] #0: 56f000000d036548 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x7f8/0x1d94 [ 5053.181264][ T26] #1: ffff80008ec87ca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x884/0x1d94 [ 5053.182992][ T26] 2 locks held by kworker/u4:7/4754: [ 5053.183322][ T26] 3 locks held by kworker/u4:9/4815: [ 5053.183639][ T26] 3 locks held by kworker/u4:11/4824: [ 5053.184020][ T26] 3 locks held by kworker/u4:6/5256: [ 5053.184338][ T26] 2 locks held by syz.6.301/5415: [ 5053.336830][ T26] 3 locks held by syz-executor/5441: [ 5053.361747][ T26] 3 locks held by kworker/u4:15/5579: [ 5053.362234][ T26] 3 locks held by kworker/u4:16/5580: [ 5053.362550][ T26] #0: f3f00000126d0148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7f8/0x1d94 [ 5053.364366][ T26] #1: ffff80008f917ca8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x884/0x1d94 [ 5053.429186][ T26] #2: ffff800087fc8700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 5053.430960][ T26] 1 lock held by modprobe/5596: [ 5053.431322][ T26] 4 locks held by dhcpcd/5597: [ 5053.431880][ T26] [ 5053.432159][ T26] ============================================= [ 5053.432159][ T26] [ 5053.433121][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 5053.442182][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 5053.443818][ T26] Hardware name: linux,dummy-virt (DT) [ 5053.444831][ T26] Call trace: [ 5053.445710][ T26] show_stack+0x2c/0x3c (C) [ 5053.446782][ T26] __dump_stack+0x30/0x40 [ 5053.447796][ T26] dump_stack_lvl+0x30/0x12c [ 5053.448809][ T26] dump_stack+0x1c/0x28 [ 5053.449748][ T26] vpanic+0x4d0/0x848 [ 5053.450671][ T26] vpanic+0x0/0x848 [ 5053.451554][ T26] hung_task_panic+0x0/0x2c [ 5053.452566][ T26] kthread+0x4d4/0x51c [ 5053.453543][ T26] ret_from_fork+0x10/0x20 [ 5053.455488][ T26] Kernel Offset: disabled [ 5053.456237][ T26] CPU features: 0x0000000,001a3005,fbe327a1,057ffe1f [ 5053.457428][ T26] Memory Limit: none [ 5053.459742][ T26] Rebooting in 86400 seconds..