last executing test programs: 31m32.24677701s ago: executing program 1 (id=106): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000000)={0x10002, 0x7, 0xeeef0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x8e9e, r1}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x5, 0xfffffffffffffffc, &(0x7f00000000c0)=0x6}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x9}) r2 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x10003, 0x1, 0xeeee0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x7fffffffffffffff, r2}) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x24) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x48cc00, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x30) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3) (rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f00000002c0)={0x1ddde6000, 0x1000}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async, rerun: 64) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000700)={0x1, 0x300, 0x40, &(0x7f0000000300)=[0x5, 0x6, 0xc, 0xffffffff, 0x4, 0x1, 0x9, 0xfffffffffffffae8, 0x400, 0x2, 0x9, 0x7, 0x8000000000000001, 0xf, 0x5, 0x5, 0x7f4, 0x0, 0x7f, 0x8, 0x3, 0x3, 0x9d66, 0x2, 0x4, 0x8, 0x194, 0x2, 0xadd, 0xfffffffffffffffc, 0xffffffffffff8000, 0x4, 0x0, 0x6, 0x3, 0x8000, 0x10000, 0x75c648d8, 0x9, 0x0, 0x6, 0x800, 0x1a1d, 0x7fffffff, 0x0, 0x2, 0x8, 0x80, 0x3, 0x8, 0x6, 0xffffffffffffffff, 0x7, 0x9, 0xb4, 0x10, 0xa, 0x1, 0x9, 0x1ff, 0x4, 0x2, 0x7fff, 0x1, 0x5, 0xaf24000000000, 0x3, 0x3, 0x401, 0x3, 0x7, 0xfffffffffffffffd, 0x3, 0x8, 0x9fdc, 0x3, 0x8, 0xae2e, 0x3, 0x1, 0x8c5b, 0x9, 0x1, 0x10001, 0x3, 0xbca7, 0x2, 0x0, 0x2, 0xffffffffffff2e95, 0xe02, 0x1, 0x6, 0x2, 0xefed, 0x800, 0x10, 0x9, 0x7, 0x5, 0x4, 0x1, 0x0, 0x7, 0x80000000, 0x3, 0x9a09, 0x1, 0x1, 0xce3, 0x1, 0x401, 0x0, 0x900, 0x5, 0x1, 0x9, 0x1, 0x8000, 0x6, 0xf, 0x8, 0x8, 0x1, 0x80000001, 0x8, 0x1, 0x66e]}) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000740)={0x8000000, 0xa000, 0x1}) (async) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r10, 0x4068aea3, &(0x7f0000000780)={0xdf, 0x0, 0x16000}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d) (async) close(r7) syz_kvm_vgic_v3_setup(r2, 0x2, 0x20) (async) ioctl$KVM_GET_SREGS(r2, 0x8000ae83, &(0x7f0000000800)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) (async) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r5, 0x4068aea3, &(0x7f0000000980)) r11 = eventfd2(0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000a00)={r11, 0x101, 0x1, r1}) 31m26.671191598s ago: executing program 1 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) 31m21.110945465s ago: executing program 0 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x3}) 31m20.796822058s ago: executing program 1 (id=110): munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900c3, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x400454da, 0x1) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x210101, 0x0) 31m15.561339731s ago: executing program 0 (id=111): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x802, 0x40000008, 0x0, 0x80}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x180) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31m15.321252356s ago: executing program 1 (id=112): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="37e68986ad644f5dc57bbc1ff382863b67f3eee57a32ec911d95f88f3dd8ea716e4a29cefbd440b2ecf83f57baf33b0c97182970a47ef45c954e42f2055384921830f6e273d2eb30", 0x0, 0x2a2019ac5ed2a1ef) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000100)="746abf250f7959c813e4adfb369b808022e69fe80cfadce4a1259e77bab54ac9749537b3d016bb7f745a6e22d2f9ff443f19467748a3fe02c239457600", 0x0, 0xfffffffffffffec5) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x2, 0x0, 0x0}) r5 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000a67000/0x400000)=nil) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0207"]) r8 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 31m7.896937619s ago: executing program 0 (id=113): mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x4019032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000100)=0x7fffffff}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x8, 0x80, 0x80}}], 0x50}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x1, 0x104000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x3000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x99000, 0x1}) syz_kvm_vgic_v3_setup(r4, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 30m58.816619376s ago: executing program 0 (id=114): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) 30m53.339741313s ago: executing program 1 (id=115): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000040)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x6030000000138002}}], 0x20}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x7, 0xfffffffffffffff8, &(0x7f0000000000)=0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30m50.717461029s ago: executing program 0 (id=116): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x18b080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0189436, 0x20004000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x200000000001b) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=[@its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x3, 0x5, 0x3, 0x7, 0x4}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_PTP_KVM(r6, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x3) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x2132, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r2, 0x4010aeb5, &(0x7f0000000040)={0x5, 0x7f}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) mmap$KVM_VCPU(&(0x7f0000e83000/0x1000)=nil, 0x0, 0x1000002, 0x10010, r4, 0x0) 30m43.723268645s ago: executing program 0 (id=117): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff, 0x1}) (async, rerun: 64) openat$kvm(0x0, 0x0, 0x14002, 0x0) (rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0xffffffffffffffa2) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100016, 0xffffffffffffffff}) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000280)=0x9}) (rerun: 64) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 64) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30m43.006742721s ago: executing program 1 (id=118): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0x84000051, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29m57.676655246s ago: executing program 32 (id=117): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x8, 0xffffffffffffffff, 0x1}) (async, rerun: 64) openat$kvm(0x0, 0x0, 0x14002, 0x0) (rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0xffffffffffffffa2) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100016, 0xffffffffffffffff}) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000280)=0x9}) (rerun: 64) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async, rerun: 64) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29m55.342348451s ago: executing program 33 (id=118): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x4]}}, @hvc={0x32, 0x40, {0x84000051, [0x0, 0x1, 0x2, 0x3, 0x6]}}], 0x80}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m17.986921257s ago: executing program 2 (id=131): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0xeeee8000, 0x1000, &(0x7f0000f95000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 23m7.298709163s ago: executing program 2 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000080000000100ffff8a"]) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000080000000100ffff8a"]) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r4, &(0x7f00000001c0)=0x7ffffff, 0xfdef) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x2, 0x7ff}) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x2, 0x7ff}) 22m56.084432962s ago: executing program 2 (id=135): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000842000/0x1000)=nil, r0, 0x1000005, 0x5c1fd1b6164b3f1, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000842000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000000)=[@smc={0x1e, 0x40, {0x4, [0xb, 0xe, 0xc, 0x6, 0x7]}}, @msr={0x14, 0x20, {0x603000000013dee5, 0x1}}, @irq_setup={0x46, 0x18, {0x3, 0x1ce}}, @code={0xa, 0x9c, {"0098202e007008d5007008d5804294d20060b0f2810080d2a20080d2a30180d2440180d2020000d400b8a17ea0de9cd200e0b0f2610080d2c20080d2e30080d2240180d2020000d440c495d20060b8f2810180d2a20180d2e30080d2440080d2020000d400c0400d005c205ee0869fd200e0b8f2410080d2620180d2430080d2a40080d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x1, 0x94}}, @irq_setup={0x46, 0x18, {0x1, 0x23}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x4, 0x8, 0x8, 0x2, 0x1}}, @hvc={0x32, 0x40, {0x84000053, [0x9, 0x32bf, 0x9, 0x46, 0x3]}}, @hvc={0x32, 0x40, {0x44001fe9, [0x7e5, 0xfffffffffffff000, 0x9, 0x5, 0x7]}}, @svc={0x122, 0x40, {0x4, [0x7fac, 0x8, 0x8000, 0x1, 0x7]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x1, 0x4}}, @hvc={0x32, 0x40, {0x84000053, [0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x4]}}, @uexit={0x0, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x4, 0x1ec}}, @mrs={0xbe, 0x18, {0x603000000013c4f1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x3, 0xd, 0x101, 0x5, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013c661}}, @svc={0x122, 0x40, {0x40000000, [0x27c8, 0x7f, 0x9, 0x5, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0x4, 0x5, 0x5, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x1, 0x5, 0x10001, 0x1, 0x2}}, @code={0xa, 0x84, {"008008d5000008d5007008d50000009ac0b69bd200c0b0f2e10080d2020180d2830180d2640180d2020000d40004809a00808088004c200e20969ad200a0b8f2e10080d2620180d2a30080d2040080d2020000d4e0eb8dd20040b0f2c10080d2c20080d2830080d2440180d2020000d4"}}, @hvc={0x32, 0x40, {0x32000000, [0x74e8, 0xffffffffffffffff, 0x332, 0x9, 0x3]}}, @msr={0x14, 0x20, {0x603000000013804d}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x70, 0xa04, 0xd}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x2000, 0x7fffffffffffffff, 0xe}}, @msr={0x14, 0x20, {0x603000000013e08d, 0x3}}, @code={0xa, 0xcc, {"000028d5e0f89cd20000b8f2410080d2420080d2430180d2440180d2020000d4007008d540d28ed20000b8f2c10080d2820180d2a30180d2040180d2020000d480ce8ed20020b8f2a10180d2420080d2030180d2a40180d2020000d4c07895d200a0b0f2610080d2a20180d2830180d2840180d2020000d4000028d50040800c80b892d20020b0f2a10180d2220080d2430080d2c40080d2020000d4009682d20060b8f2a10080d2220180d2430080d2240180d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0xf20, 0x9, 0xa43803b77a868e66}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x88, 0x2, 0x4}}, @code={0xa, 0xcc, {"40b99cd200c0b8f2c10180d2820080d2e30180d2640080d2020000d4a0e090d20020b0f2010080d2020180d2430080d2c40080d2020000d4007008d5e00492d20040b0f2a10080d2620080d2230080d2c40080d2020000d4804993d20060b8f2e10080d2e20180d2430180d2840080d2020000d400d8a00e00a0400d0004809a80f18dd20040b0f2410180d2820180d2030080d2040080d2020000d4200c9fd20060b8f2210180d2a20180d2030080d2c40080d2020000d4"}}, @svc={0x122, 0x40, {0xe9ad76e4281b48b9, [0x0, 0x0, 0x38f, 0x400, 0x40]}}], 0x778}, &(0x7f00000007c0)=[@featur1={0x1, 0xd0}], 0x1) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r0, 0xa, 0x810, r2, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000840)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000800)=0x80000001}) 22m46.453837957s ago: executing program 2 (id=136): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013c081, 0x2}}], 0x20}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22m38.427152907s ago: executing program 3 (id=137): ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xb9db, 0x2, 0x2}}) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x2, 0xeeee8000, 0x1, r1, 0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x7, 0xfffffffe, 0x2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000100)={0x1ff, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r4 = eventfd2(0xa, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x6, 0x10000, 0x1, r4, 0xf}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10004, 0x0, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r5 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000240)={0x10001, 0x2, 0xeeee0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x9, r1}) r6 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_PPC_ALLOCATE_HTAB(r6, 0xc004aea7, &(0x7f0000000300)=0xb) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000380)={r5, 0x5d, 0x2, r6}) r8 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$eventfd(r5, &(0x7f00000003c0)=0x8, 0x8) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f0000000400)={0xb6, 0x0, 0x23e}) r9 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000480)={0x400, 0x5000, 0x8, r0, 0xe}) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x2) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f00000004c0)={0xa8, 0x0, 0x3}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000540)={0x9}) 22m36.474124029s ago: executing program 2 (id=138): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x8040aeb6, &(0x7f00000001c0)=@attr_other={0x0, 0x7, 0x1, 0x0}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) (async) r5 = eventfd2(0x8801, 0x800) (async) r6 = eventfd2(0x3ff, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5, 0x5, 0x2, r6}) close(r5) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r8, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r14, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) 22m28.13975161s ago: executing program 3 (id=139): syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x600900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bde000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x2, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r4, 0x800454d3, 0xfffffffffffffffa) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0x7}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = openat$kvm(0x0, 0x0, 0x2002, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) r9 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r14, 0x4004ae8b, &(0x7f0000000380)=ANY=[@ANYBLOB='\b\x00']) mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r11, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3e) 22m24.474127868s ago: executing program 2 (id=140): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x13, r2, 0x0) 22m16.601719121s ago: executing program 3 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x9, &(0x7f0000000040)=0x5}) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f) (async) r1 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000880)=[@msr={0x14, 0x20, {0x6030000000138016, 0x7}}, @hvc={0x32, 0x40, {0x20, [0x0, 0x100000000, 0x2, 0x8, 0x10]}}, @mrs={0xbe, 0x18, {0x603000000013e600}}, @msr={0x14, 0x20, {0x603000000013f081, 0xc7}}, @smc={0x1e, 0x40, {0x8400000b, [0x6, 0x7fff, 0x7f, 0x8, 0x1000]}}, @code={0xa, 0x6c, {"0024002f007008d5a0f194d200c0b8f2c10080d2020180d2430180d2640080d2020000d4000400b8000008d5008008d5008008d5007008d5007008d560839fd200a0b0f2810180d2420180d2630080d2c40080d2020000d4"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x380, 0x76, 0x5}}, @mrs={0xbe, 0x18, {0x603000000013e6d9}}, @svc={0x122, 0x40, {0x1000000, [0x8, 0xd84e, 0x1a, 0x5, 0x5]}}, @irq_setup={0x46, 0x18, {0x4, 0x398}}, @code={0xa, 0xb4, {"a08987d20040b8f2e10180d2620180d2a30180d2c40180d2020000d4a09a9ed200c0b8f2c10080d2e20180d2a30080d2e40080d2020000d4000008d500d093d200c0b0f2810180d2620080d2a30180d2a40180d2020000d40040a00d607282d20080b0f2810080d2c20180d2830180d2c40080d2020000d4008008d5007008d5e0b49dd20060b8f2c10080d2820080d2a30080d2640180d2020000d40040400c"}}, @msr={0x14, 0x20, {0x6030000000131a01, 0xfff}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0xb4, {"e01e83d200e0b0f2e10080d2420080d2c30080d2a40180d2020000d4008008d5a07399d20000b0f2410180d2a20080d2a30080d2640180d2020000d40058000e00ae96d20080b0f2010180d2620080d2a30180d2040180d2020000d4e01f92d20080b0f2010180d2c20080d2430080d2e40080d2020000d4000008d5000e97d20020b0f2210180d2020080d2c30180d2a40180d2020000d4007008d5008008d5"}}, @svc={0x122, 0x40, {0x8000, [0x7bd6fd78, 0x5, 0x8, 0x3, 0x4]}}, @msr={0x14, 0x20, {0x603000000013df01, 0x5}}, @hvc={0x32, 0x40, {0x84000010, [0x487, 0x0, 0x1, 0x7, 0x2]}}, @irq_setup={0x46, 0x18, {0x0, 0x18a}}, @its_setup={0x82, 0x28, {0x0, 0x3, 0x3e}}, @eret={0xe6, 0x18, 0x7}, @code={0xa, 0xb4, {"000028d5000028d5007008d50068212ec05583d20040b0f2410180d2a20180d2c30180d2240080d2020000d4007008d580a18fd200c0b8f2210180d2220080d2230180d2440080d2020000d4c06e99d20000b8f2210080d2420180d2630080d2440180d2020000d4a08888d20020b8f2210180d2c20180d2030180d2440080d2020000d4001989d200e0b8f2c10180d2c20180d2830180d2c40180d2020000d4"}}, @smc={0x1e, 0x40, {0x84000005, [0x3, 0x1, 0x25, 0xffffffff, 0x5]}}, @msr={0x14, 0x20, {0x603000000013e66b, 0x5}}, @hvc={0x32, 0x40, {0xc4000053, [0x8, 0x6, 0xff800000, 0x1, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013806f}}, @mrs={0xbe, 0x18, {0x603000000013e6cd}}, @msr={0x14, 0x20, {0x603000000013c012}}], 0x620}, &(0x7f0000000840)=[@featur1={0x1, 0x2}], 0x1) r2 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0x2010, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r4, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (rerun: 32) 22m7.22471317s ago: executing program 3 (id=142): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c038, &(0x7f0000000200)=0x3}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d7b5827d551edf5c2be00858d143f000000007bfef78813e04040000000003060"], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef"], 0x80}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10600, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$arm64(r1, r3, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013c038, &(0x7f0000000200)=0x3}) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) syz_kvm_setup_cpu$arm64(r7, r8, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d7b5827d551edf5c2be00858d143f000000007bfef78813e04040000000003060"], 0x18}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) (async) syz_kvm_setup_cpu$arm64(r5, 0xffffffffffffffff, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef"], 0x80}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10600, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) 21m37.67107914s ago: executing program 34 (id=140): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x13, r2, 0x0) 21m29.008674994s ago: executing program 3 (id=144): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000aea000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000b6a000/0x400000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="be00000000000000180000000000000001c8", @ANYBLOB="066dd4ff8549fd709f7ceda76c5a60cce493b221ee53b0e2d9af77ea244bb20c2d2cb03247cccb9543510cee3df051d4a172cb36a08ad61915f808d100e75815df057f657109b0e95cda76e69ede73096186fd40fa5da060cd"], 0x18}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000c69000/0x2000)=nil, r0, 0x100000c, 0x12, r4, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 21m17.553738135s ago: executing program 3 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000002c0)=[{0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000be00000000000000180000000000000054801300000030600000000000000000180000000000000000080000000000001e000000000000004000000000000000ff7f008000000000ff0100000000000002000000000000000d0000000000000007000000000000000200000000000000320000000000000040000000000000000000000600000000810000000000000000000031c53dcf9ccbe25700000000000000000000000000df75000000000000"], 0xc8}], 0x1, 0x0, &(0x7f0000000340)=[@featur2={0x1, 0x13}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x1}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df60, 0x2}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x2, 0x8, 0x80, 0xfffffffa}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) 20m30.629004693s ago: executing program 35 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000002c0)=[{0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000be00000000000000180000000000000054801300000030600000000000000000180000000000000000080000000000001e000000000000004000000000000000ff7f008000000000ff0100000000000002000000000000000d0000000000000007000000000000000200000000000000320000000000000040000000000000000000000600000000810000000000000000000031c53dcf9ccbe25700000000000000000000000000df75000000000000"], 0xc8}], 0x1, 0x0, &(0x7f0000000340)=[@featur2={0x1, 0x13}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x1}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r9 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013df60, 0x2}}], 0x20}, &(0x7f0000000280)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_init) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x2, 0x2, 0x8, 0x80, 0xfffffffa}}], 0x28}, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) r17 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) 11m55.439671121s ago: executing program 4 (id=169): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000000)={0xa, 0x4}}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r8, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f0000000100)=@attr_pmu_init) ioctl$KVM_RUN(r8, 0xae80, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) write$eventfd(r4, &(0x7f0000000180)=0x5, 0xfffffde3) mmap$KVM_VCPU(&(0x7f0000010000/0x1000)=nil, 0x930, 0x100000f, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x4c90e704a5229134, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 11m46.688441338s ago: executing program 5 (id=170): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$arm64(r1, 0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000180)=[{0x0, &(0x7f0000000340)=[@mrs={0xbe, 0x18, {0x6030000000131a01}}, @msr={0x14, 0x20, {0x6030000000138044, 0x867}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x40, 0x6, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x0, 0x1, 0x9, 0x3}}, @msr={0x14, 0x20, {0x603000000013e100, 0x7fff}}, @svc={0x122, 0x40, {0x80000000, [0x8, 0x99, 0x401, 0xc3, 0x2]}}, @hvc={0x32, 0x40, {0x100, [0x5, 0x8000000000000001, 0x1, 0x8, 0x1]}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x1, 0x1, 0xb, 0x9, 0xfffffff8, 0x1}}, @hvc={0x32, 0x40, {0x3000000, [0xca2, 0x101, 0x86, 0x8, 0x8000]}}, @msr={0x14, 0x20, {0x603000000013defd, 0x7}}, @uexit={0x0, 0x18, 0xdd}, @code={0xa, 0x6c, {"008008d50028c01a007008d5007008d5000000b280b489d20060b0f2e10080d2620180d2c30180d2240180d2020000d4a07b8fd20080b8f2010180d2820080d2630180d2e40180d2020000d4007008d5000080a9000028d5"}}, @svc={0x122, 0x40, {0x8, [0x4, 0x8, 0x10, 0x4, 0xffffffffffffffff]}}, @hvc={0x32, 0x40, {0x84000053, [0x4f, 0xc, 0x5, 0x100, 0x200000000000]}}, @hvc={0x32, 0x40, {0x667d47305e4cc6f9, [0x401, 0x6, 0x2, 0x9, 0x6278]}}, @irq_setup={0x46, 0x18, {0x0, 0x2ce}}, @code={0xa, 0xb4, {"007008d5007008d5c08a84d20060b0f2a10180d2e20080d2430080d2040080d2020000d40000249e202299d20020b8f2a10080d2c20080d2430080d2840180d2020000d4c05d9cd20060b8f2210080d2420180d2830080d2c40080d2020000d4008008d5000028d5e02783d20080b0f2010080d2020080d2630180d2640180d2020000d4e07693d20020b0f2010180d2020180d2630180d2840180d2020000d4"}}, @memwrite={0x6e, 0x30, @generic={0xeeee0000, 0xff, 0xed6, 0x8}}, @uexit={0x0, 0x18, 0x4}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0xe, 0xffff, 0x17e, 0x3}}, @eret={0xe6, 0x18, 0xffff}, @irq_setup={0x46, 0x18, {0x2, 0x29a}}, @uexit={0x0, 0x18, 0x18fa}, @mrs={0xbe, 0x18, {0x1f56}}, @eret={0xe6, 0x18, 0x5}, @hvc={0x32, 0x40, {0x84000005, [0x7ff, 0x8, 0x8, 0x4, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0x0, 0xd, 0x1, 0x3}}, @svc={0x122, 0x40, {0x84000002, [0x1, 0x4ed, 0x7, 0x1, 0x9]}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x377}}], 0x580}], 0x1, 0x0, &(0x7f00000001c0)=[@featur2={0x1, 0x81}], 0x1) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) r6 = eventfd2(0xd, 0x1) close(r6) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r6, 0x0, 0x500) write$eventfd(r6, &(0x7f0000000000)=0x1, 0x8) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x161681, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f0000000140)={0x4, 0xffffff81, 0x650c}) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000100)=@arm64_core={0x6030000000100020, &(0x7f0000000000)=0x2}) 11m38.459304181s ago: executing program 4 (id=171): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f00000005c0)=@attr_pmu_irq={0x0, 0x0, 0x2000000, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = eventfd2(0x9, 0x800) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x5, &(0x7f0000000280)=0x400000080a0000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r5, 0xcc}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) r15 = syz_kvm_vgic_v3_setup(r14, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r15, 0x4018aee2, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x800000000008, &(0x7f00000004c0)=0x1}) ioctl$KVM_CREATE_VM(r4, 0x800454e1, 0x12) 11m28.488728602s ago: executing program 5 (id=172): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x2, &(0x7f0000000000)=0xfffffffffffffff9}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x108, &(0x7f0000000340)=0x8000000000000000}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x26f}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x4, 0xc0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x7}) (async) r11 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r11}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0xf000}) (async) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000000c0)={0x8}) (async) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000000)={0x2, 0xeeee0000}) syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000280)={0x0, 0x0, 0x55}, 0x0, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x28) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) syz_kvm_setup_cpu$arm64(r13, r15, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) 11m16.900103549s ago: executing program 4 (id=173): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = eventfd2(0xd, 0x1) close(r7) (async) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) (async) write$eventfd(r7, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000002c0)=@arm64_fp={0x60400000001000ac, &(0x7f00000000c0)=0x2}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m12.636795826s ago: executing program 5 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=[@featur2={0x1, 0x52}], 0x1) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x48a, 0x1, 0x8000000000000000, 0x1, 0x80003fffff]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x78) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0x7}) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r12, 0x400454d0, 0x2d) (async) r13 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r16, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2, 0x3, 0x3ca}}], 0x28}, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r17, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000000)=0x8090000}) 11m3.211556431s ago: executing program 4 (id=175): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r1, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r1, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0x40086602, 0x110e22ffff) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000800000/0x800000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) r4 = eventfd2(0xfffffffa, 0x80001) write$eventfd(r4, &(0x7f0000000200)=0x8, 0x8) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43) ioctl$KVM_CHECK_EXTENSION(r3, 0x40086602, 0x110e227ffe) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r1, 0x3000002, 0x28032, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$arm64(r6, r8, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRESDEC=r2, @ANYRESOCT=r7], 0x21c}], 0x1, 0x0, 0x0, 0xfffffff8) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 10m57.46021946s ago: executing program 5 (id=176): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000040)={0x0, 0x2000}) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@msr={0x14, 0x20, {0x603000000013dce0, 0xffffffffffffffff}}], 0x20}, &(0x7f00000000c0)=[@featur1={0x1, 0x89}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x254200, 0x0) syz_kvm_vgic_v3_setup(r5, 0x4, 0x340) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r13 = ioctl$KVM_CREATE_VM(r12, 0x894c, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0x40305839, 0xfffffffffffffffc) r14 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x2, 0x7f, &(0x7f0000000340)=0x6}) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r14, 0xc018aec0, &(0x7f00000000c0)={0x1}) r15 = eventfd2(0x101, 0x800) write$eventfd(r15, &(0x7f0000000080)=0xfffffffffffffff7, 0x8) 10m41.620137762s ago: executing program 4 (id=177): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000280)=@arm64_sys={0x603000000013808c, &(0x7f00000001c0)}) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x408) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r9, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x18000}) (async) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, &(0x7f0000000180)=@arm64_sys={0x603000000013d801, &(0x7f0000000000)=0x1}) 10m34.541526087s ago: executing program 5 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000000001fff) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000b10000/0x400000)=nil) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) eventfd2(0xffff, 0x80000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r3 = mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="e5f9db7af003f8002e5b728041bfff932d060e1e55ba0771178895f5cca01829505f7ee8602382182893490a1832aa5d2a5616f0794f9aac69ecce514571f15067aec12ade553196", 0x0, 0x48) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r5, &(0x7f00000001c0)=0x7ffffff, 0xfffffd77) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x3, 0x6, &(0x7f0000000040)=0x93b}) r10 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0x84000006, [0x4, 0x1, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) 10m23.589252888s ago: executing program 4 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000100)="4bead90a8a524c79f126541ba60686d7378e2f7235828bcf3fa4a80d5e3c6753e0fbf42973da38e59cd4b2dc174f7f7ed37dd8abc6a52715ea2d8a070028857f943eed4506eaf7a1", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x151400, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100010, &(0x7f0000000100)}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil}) 10m16.34387255s ago: executing program 5 (id=180): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x6f8802, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000006, 0x13, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0x1}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000006c0)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000100)=0x8}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0xb, 0x11, r9, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2c) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160000, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002a8d22436572fe71e9a00b4d567e9ef770494cfd3f16e9ac2758748b676fc6969666d577d6dfb695feef315319a43e45ba5c037637d63501819358f7993c33ab5afe0e6c26d14307c2aa02c1107ac84097e3becc67b7f80eccc6698f756bc2f6ece4162bbfb9ad588c4a7c9c221344f893117882dbcc837109f4771f9d2fb08fb768973705183b4ef5a3997685c5dfed193271bbb3f0f65f685b137186dde683ce58d8874c52dcd58a451c3a627f24b9b8eb77f3dcfc7985505648f61e79473022ea5d55fadb5367091d9589616f09000000ff2c67c136b97c726b00"/240]) r16 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013e6d5}}, @msr={0x14, 0x20, {0x603000000013c65e, 0x2}}, @hvc={0x32, 0x40, {0xc4000001, [0xff, 0x3, 0x5, 0x8000000000000000, 0x5]}}, @smc={0x1e, 0x40, {0x86000001, [0x6b8, 0x0, 0xf, 0x9, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x78, 0x1, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x64a6, 0x1}}, @mrs={0xbe, 0x18, {0x6030000000138010}}, @code={0xa, 0x54, {"209187d20000b8f2010180d2e20080d2030180d2440080d2020000d4000000110048217e007008d5000840ba007008d500a8217e007008d5007008d5000008d5"}}, @eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"008c205e008008d5008008d50000c069007008d5007008d5c02a93d20040b8f2210080d2020080d2030080d2a40080d2020000d4e0e985d20060b8f2010080d2420180d2c30080d2240180d2020000d4000008d5007008d5"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x1c7}}, @smc={0x1e, 0x40, {0x84000011, [0x3, 0xfffffffffffffffb, 0x1, 0x1000, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013c529}}, @msr={0x14, 0x20, {0x603000000013c646, 0x8001}}, @hvc={0x32, 0x40, {0x4000105c, [0x1, 0x8, 0xd6, 0x9, 0x6]}}, @code={0xa, 0xb4, {"1820201e000008d5401190d20000b0f2c10080d2a20180d2a30080d2e40080d2020000d4000028d580d794d20020b0f2010080d2620080d2c30180d2a40080d2020000d480539ad200c0b8f2210080d2a20080d2e30180d2a40080d2020000d4602d89d200e0b8f2010080d2c20080d2430180d2a40080d2020000d40084000d007008d580ea80d20060b0f2410180d2420180d2a30080d2040180d2020000d4"}}, @svc={0x122, 0x40, {0x84000012, [0xffff, 0x2, 0x2, 0x4, 0x2628]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x400, 0x7fffffff, 0x1}}, @hvc={0x32, 0x40, {0x8400000e, [0x1, 0x1730960e, 0x7, 0x4e613452, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013804e}}, @eret={0xe6, 0x18, 0x58bc}, @smc={0x1e, 0x40, {0x84000006, [0x7fffffffffffffff, 0x4, 0xffffffff, 0x800, 0x3]}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x9d}}], 0x4fc}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r17, 0x4018aee1, 0x0) ioctl$KVM_RUN(r17, 0xae80, 0x0) 9m36.397153719s ago: executing program 36 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013e08d, &(0x7f00000000c0)=0x6db}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x8080000, 0x2000, &(0x7f0000c5d000/0x2000)=nil}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000100)="4bead90a8a524c79f126541ba60686d7378e2f7235828bcf3fa4a80d5e3c6753e0fbf42973da38e59cd4b2dc174f7f7ed37dd8abc6a52715ea2d8a070028857f943eed4506eaf7a1", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r12, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x151400, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100010, &(0x7f0000000100)}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1, 0x2000, &(0x7f0000f31000/0x2000)=nil}) 9m27.29912581s ago: executing program 37 (id=180): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x6f8802, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000006, 0x13, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x1, 0xe000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000001480)={0xfffffffffffffdfd, 0x13000, 0x1}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000006c0)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000100)=0x8}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0xb, 0x11, r9, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2c) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r15, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160000, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002a8d22436572fe71e9a00b4d567e9ef770494cfd3f16e9ac2758748b676fc6969666d577d6dfb695feef315319a43e45ba5c037637d63501819358f7993c33ab5afe0e6c26d14307c2aa02c1107ac84097e3becc67b7f80eccc6698f756bc2f6ece4162bbfb9ad588c4a7c9c221344f893117882dbcc837109f4771f9d2fb08fb768973705183b4ef5a3997685c5dfed193271bbb3f0f65f685b137186dde683ce58d8874c52dcd58a451c3a627f24b9b8eb77f3dcfc7985505648f61e79473022ea5d55fadb5367091d9589616f09000000ff2c67c136b97c726b00"/240]) r16 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r17 = syz_kvm_add_vcpu$arm64(r16, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@eret={0xe6, 0x18, 0x6}, @mrs={0xbe, 0x18, {0x603000000013e6d5}}, @msr={0x14, 0x20, {0x603000000013c65e, 0x2}}, @hvc={0x32, 0x40, {0xc4000001, [0xff, 0x3, 0x5, 0x8000000000000000, 0x5]}}, @smc={0x1e, 0x40, {0x86000001, [0x6b8, 0x0, 0xf, 0x9, 0x2]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80c0000, 0x78, 0x1, 0x3}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x64a6, 0x1}}, @mrs={0xbe, 0x18, {0x6030000000138010}}, @code={0xa, 0x54, {"209187d20000b8f2010180d2e20080d2030180d2440080d2020000d4000000110048217e007008d5000840ba007008d500a8217e007008d5007008d5000008d5"}}, @eret={0xe6, 0x18, 0x9}, @code={0xa, 0x6c, {"008c205e008008d5008008d50000c069007008d5007008d5c02a93d20040b8f2210080d2020080d2030080d2a40080d2020000d4e0e985d20060b8f2010080d2420180d2c30080d2240180d2020000d4000008d5007008d5"}}, @its_setup={0x82, 0x28, {0x0, 0x1, 0x1c7}}, @smc={0x1e, 0x40, {0x84000011, [0x3, 0xfffffffffffffffb, 0x1, 0x1000, 0x2]}}, @mrs={0xbe, 0x18, {0x603000000013c529}}, @msr={0x14, 0x20, {0x603000000013c646, 0x8001}}, @hvc={0x32, 0x40, {0x4000105c, [0x1, 0x8, 0xd6, 0x9, 0x6]}}, @code={0xa, 0xb4, {"1820201e000008d5401190d20000b0f2c10080d2a20180d2a30080d2e40080d2020000d4000028d580d794d20020b0f2010080d2620080d2c30180d2a40080d2020000d480539ad200c0b8f2210080d2a20080d2e30180d2a40080d2020000d4602d89d200e0b8f2010080d2c20080d2430180d2a40080d2020000d40084000d007008d580ea80d20060b0f2410180d2420180d2a30080d2040180d2020000d4"}}, @svc={0x122, 0x40, {0x84000012, [0xffff, 0x2, 0x2, 0x4, 0x2628]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x400, 0x7fffffff, 0x1}}, @hvc={0x32, 0x40, {0x8400000e, [0x1, 0x1730960e, 0x7, 0x4e613452, 0x3]}}, @mrs={0xbe, 0x18, {0x603000000013804e}}, @eret={0xe6, 0x18, 0x58bc}, @smc={0x1e, 0x40, {0x84000006, [0x7fffffffffffffff, 0x4, 0xffffffff, 0x800, 0x3]}}, @its_setup={0x82, 0x28, {0x1, 0x0, 0x9d}}], 0x4fc}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r17, 0x4018aee1, 0x0) ioctl$KVM_RUN(r17, 0xae80, 0x0) 1m55.348794624s ago: executing program 6 (id=181): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x17) 1m40.379785695s ago: executing program 7 (id=182): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="a400"]) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r3, 0x3, 0xa0) r4 = eventfd2(0x6, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r4, 0x9}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000000000/0x400000)=nil) r5 = eventfd2(0xfaf, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r5, 0x3, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r8, 0x400454ce, 0x110c230008) 1m39.053750805s ago: executing program 6 (id=183): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000559000/0x2000)=nil, 0x0, 0x6, 0x80010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00007c6000/0x2000)=nil, 0x0, 0x5, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r1, 0x100000c, 0x10010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) munmap(&(0x7f000054e000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000e47000/0x2000)=nil, 0x930, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, r1, 0x300000b, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x1, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f7c000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x80, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x0, r4, 0x2}) 1m21.96901512s ago: executing program 6 (id=184): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r4, 0x3, 0x11, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) 1m17.482354517s ago: executing program 7 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xc0189436, 0x172) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000000180)) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r11 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000000c0)={0x77c1, 0x8}) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r13, 0x3, 0x40b2811, r12, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m5.618442834s ago: executing program 6 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r1, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013c600, 0xfefefee0}}], 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c600, &(0x7f0000000140)}) munmap(&(0x7f0000f7c000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r5, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000340)=@attr_arm64={0x0, 0x2, 0x0, 0x0}) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) 48.229030677s ago: executing program 6 (id=187): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2, 0x2, 0x7c}}], 0x28}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x6}) 29.422369978s ago: executing program 38 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82880, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xc0189436, 0x172) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x101282, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3e) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CAP_ARM_MTE(r6, 0x4068aea3, &(0x7f0000000180)) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r10, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r11 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@svc={0x122, 0x40, {0x800, [0xffffffeffffffff8, 0x8, 0x8000000005, 0x5, 0x400]}}], 0x40}, 0x0, 0x0) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000000c0)={0x77c1, 0x8}) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) mmap$KVM_VCPU(&(0x7f0000c0b000/0x1000)=nil, r13, 0x3, 0x40b2811, r12, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 0s ago: executing program 39 (id=187): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@its_setup={0x82, 0x28, {0x2, 0x2, 0x7c}}], 0x28}, 0x0, 0x0) r4 = syz_kvm_vgic_v3_setup(r1, 0xffffffffffbffffc, 0x120) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x5, 0x0, &(0x7f0000000000)=0x6}) kernel console output (not intermixed with test programs): [ 420.893867][ T3155] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:1360' (ED25519) to the list of known hosts. [ 589.936081][ T25] audit: type=1400 audit(589.170:61): avc: denied { name_bind } for pid=3313 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 590.853665][ T25] audit: type=1400 audit(590.090:62): avc: denied { execute } for pid=3314 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 590.873290][ T25] audit: type=1400 audit(590.110:63): avc: denied { execute_no_trans } for pid=3314 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 610.726330][ T25] audit: type=1400 audit(609.960:64): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 610.762508][ T25] audit: type=1400 audit(610.000:65): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 610.842191][ T3314] cgroup: Unknown subsys name 'net' [ 610.894424][ T25] audit: type=1400 audit(610.130:66): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 611.265786][ T3314] cgroup: Unknown subsys name 'cpuset' [ 611.361736][ T3314] cgroup: Unknown subsys name 'rlimit' [ 612.260393][ T25] audit: type=1400 audit(611.500:67): avc: denied { setattr } for pid=3314 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.282283][ T25] audit: type=1400 audit(611.520:68): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 612.309190][ T25] audit: type=1400 audit(611.540:69): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 613.539275][ T3317] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 613.559981][ T25] audit: type=1400 audit(612.790:70): avc: denied { relabelto } for pid=3317 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 613.579351][ T25] audit: type=1400 audit(612.810:71): avc: denied { write } for pid=3317 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 613.759836][ T25] audit: type=1400 audit(613.000:72): avc: denied { read } for pid=3314 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 613.781363][ T25] audit: type=1400 audit(613.010:73): avc: denied { open } for pid=3314 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 613.830620][ T3314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 664.038418][ T25] audit: type=1400 audit(663.270:74): avc: denied { execmem } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 668.673121][ T25] audit: type=1400 audit(667.910:75): avc: denied { read } for pid=3321 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 668.687653][ T25] audit: type=1400 audit(667.920:76): avc: denied { read } for pid=3320 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 668.711640][ T25] audit: type=1400 audit(667.950:77): avc: denied { open } for pid=3320 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 668.784414][ T25] audit: type=1400 audit(668.020:78): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 669.020899][ T25] audit: type=1400 audit(668.260:79): avc: denied { module_request } for pid=3320 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 670.107823][ T25] audit: type=1400 audit(669.340:80): avc: denied { sys_module } for pid=3320 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 693.662977][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.896291][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.613825][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.749123][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.307755][ T3320] hsr_slave_0: entered promiscuous mode [ 711.335867][ T3320] hsr_slave_1: entered promiscuous mode [ 712.689184][ T3321] hsr_slave_0: entered promiscuous mode [ 712.721479][ T3321] hsr_slave_1: entered promiscuous mode [ 712.752565][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 712.766086][ T3321] Cannot create hsr debugfs directory [ 717.698848][ T25] audit: type=1400 audit(716.930:81): avc: denied { create } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.797607][ T25] audit: type=1400 audit(717.010:82): avc: denied { write } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 717.819196][ T25] audit: type=1400 audit(717.050:83): avc: denied { read } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.009421][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 718.400888][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 718.604166][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 718.949083][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 720.369909][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 720.540141][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 720.693824][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 720.997308][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.159068][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.348252][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.611504][ T3320] veth0_vlan: entered promiscuous mode [ 791.053945][ T3320] veth1_vlan: entered promiscuous mode [ 793.078285][ T3321] veth0_vlan: entered promiscuous mode [ 793.139552][ T3320] veth0_macvtap: entered promiscuous mode [ 793.660421][ T3320] veth1_macvtap: entered promiscuous mode [ 793.998467][ T3321] veth1_vlan: entered promiscuous mode [ 796.521351][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.537877][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.541725][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.799076][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.338617][ T3321] veth0_macvtap: entered promiscuous mode [ 798.269803][ T3321] veth1_macvtap: entered promiscuous mode [ 800.171238][ T25] audit: type=1400 audit(799.370:84): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 800.460772][ T25] audit: type=1400 audit(799.600:85): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/syzkaller.i8ERm9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 800.770630][ T25] audit: type=1400 audit(799.980:86): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 801.515787][ T25] audit: type=1400 audit(800.710:87): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/syzkaller.i8ERm9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 801.671085][ T25] audit: type=1400 audit(800.910:88): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/syzkaller.i8ERm9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 801.698977][ T21] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.726693][ T3402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.727828][ T3402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.728667][ T3402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.629469][ T25] audit: type=1400 audit(801.870:89): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 803.171987][ T25] audit: type=1400 audit(802.280:90): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 803.351871][ T25] audit: type=1400 audit(802.590:91): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="gadgetfs" ino=3791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 803.767022][ T25] audit: type=1400 audit(803.000:92): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 803.846211][ T25] audit: type=1400 audit(803.080:93): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 805.592777][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 807.268223][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 807.287403][ T25] audit: type=1400 audit(806.450:95): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.294096][ T25] audit: type=1400 audit(806.500:96): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.369259][ T25] audit: type=1400 audit(806.500:97): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.469086][ T25] audit: type=1400 audit(815.710:98): avc: denied { read } for pid=3479 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 816.497359][ T25] audit: type=1400 audit(815.720:99): avc: denied { open } for pid=3479 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 816.570191][ T25] audit: type=1400 audit(815.810:100): avc: denied { ioctl } for pid=3479 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 825.962092][ T25] audit: type=1400 audit(825.200:101): avc: denied { write } for pid=3489 comm="syz.0.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 838.434313][ T25] audit: type=1400 audit(837.660:102): avc: denied { map } for pid=3495 comm="syz.0.5" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 887.182699][ T25] audit: type=1400 audit(886.420:103): avc: denied { append } for pid=3527 comm="syz.1.15" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 895.177767][ T25] audit: type=1400 audit(894.400:104): avc: denied { ioctl } for pid=3533 comm="syz.1.16" path="net:[4026532624]" dev="nsfs" ino=4026532624 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 903.634264][ T25] audit: type=1400 audit(902.870:105): avc: denied { setattr } for pid=3540 comm="syz.1.18" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 951.860033][ T25] audit: type=1400 audit(951.090:106): avc: denied { execute } for pid=3571 comm="syz.0.29" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1383.796598][ T3861] kvm [3860]: Unsupported guest access at: eeef0000 [ 1383.796598][ T3861] { Op0( 2), Op1( 0), CRn( 0), CRm( 0), Op2( 2), func_write }, [ 1502.352639][ T3874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.640522][ T3874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.401793][ T3876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.720852][ T3876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.140238][ T3874] hsr_slave_0: entered promiscuous mode [ 1528.221061][ T3874] hsr_slave_1: entered promiscuous mode [ 1528.272031][ T3874] debugfs: 'hsr0' already exists in 'hsr' [ 1528.295631][ T3874] Cannot create hsr debugfs directory [ 1530.947651][ T3876] hsr_slave_0: entered promiscuous mode [ 1530.979902][ T3876] hsr_slave_1: entered promiscuous mode [ 1531.129858][ T3876] debugfs: 'hsr0' already exists in 'hsr' [ 1531.131714][ T3876] Cannot create hsr debugfs directory [ 1537.402588][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.989256][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.727603][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.322624][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.299613][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.528677][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.679101][ T12] bond0 (unregistering): Released all slaves [ 1557.251426][ T12] hsr_slave_0: left promiscuous mode [ 1557.313712][ T12] hsr_slave_1: left promiscuous mode [ 1557.879678][ T12] veth1_macvtap: left promiscuous mode [ 1557.881638][ T12] veth0_macvtap: left promiscuous mode [ 1557.899108][ T12] veth1_vlan: left promiscuous mode [ 1557.919164][ T12] veth0_vlan: left promiscuous mode [ 1575.218286][ T3874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1576.012376][ T3874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1576.499674][ T3874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1577.220158][ T3874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1582.747850][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.426819][ T3876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1583.704301][ T3876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1584.689573][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.173346][ T3876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1586.083027][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.551361][ T3876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1587.278618][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.628922][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.732812][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.809629][ T12] bond0 (unregistering): Released all slaves [ 1606.313753][ T12] hsr_slave_0: left promiscuous mode [ 1606.460429][ T12] hsr_slave_1: left promiscuous mode [ 1607.406040][ T12] veth1_macvtap: left promiscuous mode [ 1607.407339][ T12] veth0_macvtap: left promiscuous mode [ 1607.417375][ T12] veth1_vlan: left promiscuous mode [ 1607.448436][ T12] veth0_vlan: left promiscuous mode [ 1633.523194][ T3874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.262227][ T3876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1720.631158][ T3874] veth0_vlan: entered promiscuous mode [ 1721.381203][ T3874] veth1_vlan: entered promiscuous mode [ 1723.998768][ T3874] veth0_macvtap: entered promiscuous mode [ 1724.348695][ T3874] veth1_macvtap: entered promiscuous mode [ 1727.367799][ T3876] veth0_vlan: entered promiscuous mode [ 1727.912066][ T3958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.936778][ T3958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.946009][ T3958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.981957][ T21] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.192474][ T3876] veth1_vlan: entered promiscuous mode [ 1732.707551][ T25] audit: type=1400 audit(1731.830:107): avc: denied { mounton } for pid=3874 comm="syz-executor" path="/syzkaller.uGAXxm/syz-tmp" dev="vda" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1734.378364][ T3876] veth0_macvtap: entered promiscuous mode [ 1735.207149][ T3876] veth1_macvtap: entered promiscuous mode [ 1738.640386][ T3330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.656084][ T3424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.680992][ T3760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.720125][ T3760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.703865][ T3424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.402880][ T3424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.049965][ T3424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.533307][ T3424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.136522][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.526674][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.821350][ T3424] bond0 (unregistering): Released all slaves [ 1989.960340][ T3424] hsr_slave_0: left promiscuous mode [ 1990.098162][ T3424] hsr_slave_1: left promiscuous mode [ 1990.829487][ T3424] veth1_macvtap: left promiscuous mode [ 1990.857971][ T3424] veth0_macvtap: left promiscuous mode [ 1990.870085][ T3424] veth1_vlan: left promiscuous mode [ 1990.871608][ T3424] veth0_vlan: left promiscuous mode [ 2032.283298][ T3424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.434372][ T3424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.079806][ T3424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.603329][ T3424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2058.381601][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2058.578200][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.633849][ T3424] bond0 (unregistering): Released all slaves [ 2059.900157][ T3424] hsr_slave_0: left promiscuous mode [ 2059.949743][ T3424] hsr_slave_1: left promiscuous mode [ 2060.213737][ T3424] veth1_macvtap: left promiscuous mode [ 2060.227507][ T3424] veth0_macvtap: left promiscuous mode [ 2060.231836][ T3424] veth1_vlan: left promiscuous mode [ 2060.277449][ T3424] veth0_vlan: left promiscuous mode [ 2095.419516][ T4210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2096.101837][ T4210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.131855][ T4238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.457033][ T4238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.403766][ T4210] hsr_slave_0: entered promiscuous mode [ 2123.472706][ T4210] hsr_slave_1: entered promiscuous mode [ 2137.430405][ T4210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2137.664174][ T4210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2138.302072][ T4210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2138.739209][ T4238] hsr_slave_0: entered promiscuous mode [ 2138.819288][ T4238] hsr_slave_1: entered promiscuous mode [ 2138.866724][ T4238] debugfs: 'hsr0' already exists in 'hsr' [ 2138.876598][ T4238] Cannot create hsr debugfs directory [ 2138.901452][ T4210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2156.267029][ T4238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2156.694040][ T4238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2157.211226][ T4238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2157.703900][ T4238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2168.119729][ T4210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2188.633382][ T4238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.081357][ T4210] veth0_vlan: entered promiscuous mode [ 2297.138239][ T4210] veth1_vlan: entered promiscuous mode [ 2300.711028][ T4210] veth0_macvtap: entered promiscuous mode [ 2301.378551][ T4210] veth1_macvtap: entered promiscuous mode [ 2305.172852][ T3984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.197004][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.211070][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.317230][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.408242][ T4238] veth0_vlan: entered promiscuous mode [ 2320.391216][ T4238] veth1_vlan: entered promiscuous mode [ 2323.974338][ T4238] veth0_macvtap: entered promiscuous mode [ 2324.732492][ T4238] veth1_macvtap: entered promiscuous mode [ 2328.547496][ T4228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2328.551431][ T4228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2328.713070][ T4228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2328.736205][ T4228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.058389][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2737.381434][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2739.088480][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.882369][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2769.183307][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2769.571043][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2769.880614][ T12] bond0 (unregistering): Released all slaves [ 2772.537270][ T12] hsr_slave_0: left promiscuous mode [ 2772.643602][ T12] hsr_slave_1: left promiscuous mode [ 2773.356952][ T12] veth1_macvtap: left promiscuous mode [ 2773.360220][ T12] veth0_macvtap: left promiscuous mode [ 2773.372560][ T12] veth1_vlan: left promiscuous mode [ 2773.428126][ T12] veth0_vlan: left promiscuous mode [ 2797.698756][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2799.449834][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2801.279724][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2803.242417][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2826.736222][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2827.521713][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2828.112146][ T12] bond0 (unregistering): Released all slaves [ 2830.347803][ T12] hsr_slave_0: left promiscuous mode [ 2830.390891][ T12] hsr_slave_1: left promiscuous mode [ 2830.851978][ T12] veth1_macvtap: left promiscuous mode [ 2830.867786][ T12] veth0_macvtap: left promiscuous mode [ 2830.879196][ T12] veth1_vlan: left promiscuous mode [ 2830.903536][ T12] veth0_vlan: left promiscuous mode [ 2849.418198][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2849.794161][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2862.009580][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2862.360522][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2881.132697][ T4664] hsr_slave_0: entered promiscuous mode [ 2881.220471][ T4664] hsr_slave_1: entered promiscuous mode [ 2898.310176][ T4669] hsr_slave_0: entered promiscuous mode [ 2898.380134][ T4669] hsr_slave_1: entered promiscuous mode [ 2898.452325][ T4669] debugfs: 'hsr0' already exists in 'hsr' [ 2898.475977][ T4669] Cannot create hsr debugfs directory [ 2903.616032][ T4664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2904.385821][ T4664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2904.613806][ T4664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2904.833810][ T4664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2915.883153][ T4669] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2916.293012][ T4669] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2916.731415][ T4669] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2917.104204][ T4669] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2939.390726][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2950.661584][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3094.060184][ T4664] veth0_vlan: entered promiscuous mode [ 3094.960349][ T4664] veth1_vlan: entered promiscuous mode [ 3098.404235][ T4664] veth0_macvtap: entered promiscuous mode [ 3098.950397][ T4664] veth1_macvtap: entered promiscuous mode [ 3102.598131][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.627974][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.631601][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.632541][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3106.417471][ T4669] veth0_vlan: entered promiscuous mode [ 3108.662602][ T4669] veth1_vlan: entered promiscuous mode [ 3113.111481][ T4669] veth0_macvtap: entered promiscuous mode [ 3113.767690][ T4669] veth1_macvtap: entered promiscuous mode [ 3118.437725][ T3330] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3118.508194][ T3958] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3118.543234][ T4833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3118.738169][ T21] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3344.662424][ T4957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3345.082517][ T4957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3388.378661][ T4971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3388.902402][ T4971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3400.841574][ T4957] hsr_slave_0: entered promiscuous mode [ 3401.013836][ T4957] hsr_slave_1: entered promiscuous mode [ 3401.054283][ T4957] debugfs: 'hsr0' already exists in 'hsr' [ 3401.222578][ T4957] Cannot create hsr debugfs directory [ 3433.232819][ T4957] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3433.953640][ T4957] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3434.899983][ T4957] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3435.583686][ T4957] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3447.303130][ T4971] hsr_slave_0: entered promiscuous mode [ 3447.522417][ T4971] hsr_slave_1: entered promiscuous mode [ 3447.699806][ T4971] debugfs: 'hsr0' already exists in 'hsr' [ 3447.799134][ T4971] Cannot create hsr debugfs directory [ 3483.172522][ T4971] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3483.833937][ T4971] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3485.146436][ T4971] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3485.967041][ T4971] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3495.952818][ T4957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3543.637934][ T4971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3641.568080][ T27] INFO: task syz.6.187:4948 blocked for more than 430 seconds. [ 3641.621471][ T27] Not tainted syzkaller #0 [ 3641.700677][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3641.727349][ T27] task:syz.6.187 state:D stack:0 pid:4948 tgid:4948 ppid:4664 task_flags:0x400040 flags:0x00000019 [ 3641.729014][ T27] Call trace: [ 3641.729512][ T27] __switch_to+0x584/0xb20 (T) [ 3641.731579][ T27] __schedule+0x1eec/0x33a4 [ 3641.732179][ T27] schedule+0xac/0x27c [ 3641.732699][ T27] schedule_timeout+0x5c/0x1e4 [ 3641.733167][ T27] do_wait_for_common+0x28c/0x444 [ 3641.733573][ T27] wait_for_completion+0x44/0x5c [ 3641.734061][ T27] __synchronize_srcu+0x2a4/0x320 [ 3641.878210][ T27] synchronize_srcu+0x3cc/0x4f0 [ 3641.879057][ T27] mmu_notifier_unregister+0x320/0x42c [ 3641.879580][ T27] kvm_put_kvm+0x6a0/0xfa8 [ 3641.879992][ T27] kvm_vm_release+0x58/0x78 [ 3641.880446][ T27] __fput+0x4ac/0x980 [ 3641.880882][ T27] ____fput+0x20/0x58 [ 3641.881328][ T27] task_work_run+0x1bc/0x254 [ 3641.881754][ T27] do_notify_resume+0x1bc/0x270 [ 3641.882213][ T27] el0_svc+0xb8/0x164 [ 3641.882643][ T27] el0t_64_sync_handler+0x84/0x12c [ 3641.883084][ T27] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3641.986554][ T27] [ 3641.986554][ T27] Showing all locks held in the system: [ 3641.997031][ T27] 3 locks held by kworker/u4:0/12: [ 3641.997756][ T27] 1 lock held by khungtaskd/27: [ 3641.998158][ T27] #0: ffff800087876d18 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 3642.000413][ T27] 2 locks held by kworker/u4:4/49: [ 3642.000799][ T27] #0: e8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 3642.002547][ T27] #1: ffff80008cb07c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 3642.004317][ T27] 1 lock held by syslogd/3114: [ 3642.204016][ T27] 2 locks held by getty/3184: [ 3642.209694][ T27] #0: 1cf0000011d0a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 3642.211637][ T27] #1: 05ff80008c5cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8 [ 3642.213369][ T27] 2 locks held by syz-executor/3314: [ 3642.213691][ T27] 3 locks held by kworker/u4:2/3330: [ 3642.214007][ T27] 2 locks held by kworker/u4:7/3402: [ 3642.214320][ T27] #0: e8f000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 3642.337080][ T27] #1: ffff8000a3c27c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 3642.338750][ T27] 2 locks held by kworker/u4:8/3424: [ 3642.339127][ T27] 3 locks held by kworker/u4:11/4403: [ 3642.339438][ T27] 3 locks held by kworker/u4:12/4444: [ 3642.339796][ T27] 2 locks held by syz.7.185/4938: [ 3642.340176][ T27] 3 locks held by kworker/u4:15/5107: [ 3642.340482][ T27] 2 locks held by dhcpcd-run-hook/5140: [ 3642.340818][ T27] 1 lock held by modprobe/5141: [ 3642.341149][ T27] 1 lock held by modprobe/5142: [ 3642.476291][ T27] [ 3642.476964][ T27] ============================================= [ 3642.476964][ T27] VM DIAGNOSIS: 16:11:43 Registers: info registers vcpu 0 CPU#0 PC=ffff80008069480c X00=ffff8000800071b8 X01=ffff80008c4f8000 X02=0000000000000010 X03=0000000000000010 X04=fff0000072d7ff40 X05=0000000000000000 X06=0000000000000000 X07=ffff800085a0b5ac X08=a94e60c8ce386100 X09=0000000000000000 X10=00000000000000c6 X11=00000000000000c6 X12=00000000000000ff X13=00000000000000c6 X14=ffff800080010e2c X15=ffff800080007348 X16=ffff800080010e20 X17=00000000000000c6 X18=00000000000000ff X19=fff0000071ba4c90 X20=c8f000000d9b9d80 X21=0000000000000820 X22=0000000096344ac9 X23=0000000000000001 X24=fff0000071ba4c90 X25=0000000000000013 X26=0000000000000000 X27=ffff80008774e000 X28=0000000000000800 X29=ffff8000800071e0 X30=ffff8000865a4a38 SP=ffff8000800071e0 PSTATE=80402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000001 Z01=0000000000000000:000000000000000a Z02=0000aaaada25040a:0000aaaada250250 Z03=0000ffffcc562a10:0000ffffcc562778 Z04=0000000000000000:0000000000000000 Z05=0000ffffcc5626d0:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:000001f40000000a Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffcc562ae0:0000ffffcc562ae0 Z17=ffffff80ffffffd0:0000ffffcc562ab0 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000