last executing test programs: 40m27.43139046s ago: executing program 0 (id=299): syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000380)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(r1, 0x4068aea3, &(0x7f0000000000)={0xe4, 0x0, 0x7}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x66) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 40m25.217748934s ago: executing program 1 (id=300): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xdddd1000, 0x0, r6}) close(r5) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1f95}, @svc={0x122, 0x40, {0x100, [0x9, 0x7030, 0x3, 0x5, 0x3]}}, @code={0xa, 0x6c, {"008008d50044207e0000809a007008d5006c200e007c001b20ec99d20040b8f2810180d2e20180d2230180d2240180d2020000d4a0a19dd20080b0f2810180d2620080d2630080d2640080d2020000d40820601e000008d5"}}], 0xc4}, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x202, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x1ff}) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8010, 0xffffffffffffffff, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ca5000/0x3000)=nil, 0x930, 0x2, 0x1010, r15, 0x40000) syz_kvm_assert_reg(r12, 0x603000000013df01, 0x8000) 40m20.920789666s ago: executing program 0 (id=301): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f0000000380)=[@uexit={0x0, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xfff4, 0x3, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x2, 0xc, 0x4, 0x6, 0x3}}, @code={0xa, 0x84, {"007008d5406994d20040b8f2e10080d2220080d2830080d2840180d2020000d4000008d5000298d20020b0f2410180d2420080d2030180d2e40080d2020000d4007008d50018000e000c201e008008d5a0b585d20020b8f2010080d2020080d2c30180d2c40180d2020000d4007008d5"}}, @code={0xa, 0x6c, {"a00787d200e0b0f2810180d2020180d2230080d2c40180d2020000d4008040480000001800004093000028d520e59bd200e0b8f2e10180d2420080d2030180d2240080d2020000d4000008d500a8300e0034000f008008d5"}}, @uexit={0x0, 0x18, 0x3}, @svc={0x122, 0x40, {0x800, [0x5, 0x10000, 0xffffffffffffffbb, 0x7, 0x3]}}, @svc={0x122, 0x40, {0xc4000003, [0x5, 0x764c00, 0x8, 0x8, 0x5093251c]}}, @code={0xa, 0x6c, {"000028d5000c200e000008d500fc001b0020a00d000028d50038302ec02f98d200c0b8f2e10080d2820080d2c30180d2640080d2020000d4403796d20080b8f2e10180d2620080d2c30180d2c40180d2020000d41f0020eb"}}, @svc={0x122, 0x40, {0xc4000001, [0x3, 0x7a6, 0xd6a, 0x6, 0x7ff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x48, 0x1a000000000000, 0x3}}, @its_send_cmd={0xaa, 0x28, {0x16, 0x1, 0x2, 0x5, 0x9, 0x82fa}}, @smc={0x1e, 0x40, {0xc4000003, [0x7, 0x7, 0x7fffffff, 0x6, 0x3]}}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x0, 0x1f7}}, @msr={0x14, 0x20, {0x603000000013c032, 0x7}}, @svc={0x122, 0x40, {0x86000001, [0xca, 0x4, 0x8, 0x9, 0x1]}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x1af}}, @svc={0x122, 0x40, {0x5000000, [0x8, 0x8, 0xbf, 0x1, 0x100]}}, @mrs={0xbe, 0x18, {0x6030000000138047}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x1, 0x4, 0x6, 0x5, 0x4}}, @irq_setup={0x46, 0x18, {0x0, 0x19b}}, @code={0xa, 0xcc, {"40f79cd20040b8f2610180d2020180d2630180d2c40180d2020000d4007008d5009588d20080b0f2e10180d2620080d2230080d2e40180d2020000d4008008d5007008d580e791d20020b8f2010080d2220180d2030180d2040080d2020000d4a0ca96d20060b0f2610180d2020080d2430180d2640180d2020000d4a00c9dd20060b8f2610180d2c20180d2030080d2c40080d2020000d40004000e00089fd200c0b0f2810180d2420080d2830180d2040080d2020000d4"}}, @uexit={0x0, 0x18, 0x5}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0xb, 0x6, 0xbb77}}, @eret={0xe6, 0x18, 0x9}, @mrs={0xbe, 0x18, {0x603000000013df61}}, @hvc={0x32, 0x40, {0xc4000004, [0x1000, 0x40, 0x2c0, 0x800, 0x4]}}], 0x608}, &(0x7f0000000300), 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x2000003, 0x80011, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x1000001, 0xdc032, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e700", 0x0, 0x48) 40m14.976712012s ago: executing program 0 (id=302): munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000eed000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r7, 0x2, 0x12, r6, 0x0) openat$kvm(0x0, 0x0, 0x4140, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r11, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r12, 0x3, 0x8010, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r10, 0x0) r13 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x20) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0xa}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x0, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) 40m13.962551759s ago: executing program 1 (id=303): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x3, 0xa0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x27) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}], 0x28}, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x28) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r13, 0x4010aeab, &(0x7f0000000040)=@arm64_sys={0x603000000013e000, 0x0}) (async) r14 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r15, 0x4010ae67, &(0x7f00000008c0)={0x1000, 0x1000}) (async) close(r15) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) r16 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r16, 0x4010aeab, &(0x7f00000003c0)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000380)}) 40m5.243239837s ago: executing program 0 (id=304): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000006c0)=[@hvc={0x32, 0x40, {0xc5000021, [0xfffffffffffffde5, 0x3ff, 0x1, 0x7, 0x9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40m3.519210779s ago: executing program 1 (id=305): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) (async) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000d38000/0x3000)=nil, r2, 0x100000d, 0x40010, r3, 0x0) (async) r4 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x0, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd, 0xf}}], 0x50}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 40m0.578648528s ago: executing program 0 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb8000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f) r3 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) (async) r6 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140003, &(0x7f0000000000)=0x4}) r10 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r5, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) (async) eventfd2(0xe, 0xc0801) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f0000000940)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 39m58.231556775s ago: executing program 1 (id=307): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1, 0x16831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df19, &(0x7f0000000280)=0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x28) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) syz_kvm_setup_cpu$arm64(r10, r12, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r13, 0x400454cc, 0x1) (async) ioctl$KVM_CREATE_VM(r13, 0x400454cc, 0x1) 39m51.267779948s ago: executing program 0 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x20282, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000280)={0x2710, 0x0, 0x8000000, 0x1000, &(0x7f0000f6c000/0x1000)=nil, 0x2000000800000000}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfd000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x100) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x640003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x21) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r13, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0x40086602, 0x110e227ffe) r16 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x2, 0x100) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r17, 0x3, 0x11, r10, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r17, 0x3, 0x11, r16, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) 39m49.489777415s ago: executing program 1 (id=309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, 0x0) r6 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) syz_kvm_setup_cpu$arm64(r1, r6, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=[{0x0, &(0x7f0000000c40)=ANY=[], 0x318}], 0x1, 0x0, &(0x7f0000000080)=[@featur2={0x1, 0x2}], 0x1) 39m40.278054904s ago: executing program 1 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r3 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000180)}) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) (async) r11 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x401, 0xa1, &(0x7f00000001c0)}) (async) r12 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f0000000040)=0xffffffffffffffff}) 39m5.009081291s ago: executing program 32 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x20282, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000280)={0x2710, 0x0, 0x8000000, 0x1000, &(0x7f0000f6c000/0x1000)=nil, 0x2000000800000000}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000bfd000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x100) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x640003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x21) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) r14 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r13, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r13, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0x40086602, 0x110e227ffe) r16 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x2, 0x100) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r17, 0x3, 0x11, r10, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r17, 0x3, 0x11, r16, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) 38m52.855781807s ago: executing program 33 (id=310): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r3 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000180)}) (async) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x3}}], 0x68}, 0x0, 0x0) (async) r11 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000280)=@attr_other={0x0, 0x401, 0xa1, &(0x7f00000001c0)}) (async) r12 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000100)=@arm64_sys={0x603000000013df1a, &(0x7f0000000040)=0xffffffffffffffff}) 32m57.031825144s ago: executing program 2 (id=317): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap$KVM_VCPU(&(0x7f0000d95000/0x4000)=nil, 0x930, 0x1000002, 0x10, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30d480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r7 = syz_kvm_vgic_v3_setup(r5, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x5, 0x8, &(0x7f0000000280)=0x5}) r8 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x21}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 32m53.532036348s ago: executing program 3 (id=318): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x0, &(0x7f0000000100)=0x2}) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x1000}], 0x18}, &(0x7f0000000300)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x200000c, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0xffef) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r6, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000190000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0xffffffff, 0x10001, 0x0}) syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r13 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f0000000380)=@attr_other={0x0, 0x5, 0x0, 0x0}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f00000000c0)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000040)=0xeb}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 32m43.940648747s ago: executing program 2 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x401c5820, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x6}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r9 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r11 = syz_kvm_vgic_v3_setup(r6, 0x4, 0x220) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000240)=@attr_other={0x0, 0x6, 0x0, 0x0}) 32m39.00994814s ago: executing program 3 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x5, 0x800) write$eventfd(r4, &(0x7f0000000000)=0xffffffffffffffff, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000200)=@arm64_fw={0x6030000000140000, &(0x7f0000000240)=0x10001}) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0xf000, 0x1000, &(0x7f0000c02000/0x1000)=nil}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) 32m24.152544405s ago: executing program 2 (id=321): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x400454cc, 0x1) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000000)={0x0, &(0x7f0000000380)=[@hvc={0x32, 0x40, {0x86000000, [0x4, 0xfffffffffffffff9, 0x4, 0x8000000000000000, 0x7]}}, @mrs={0xbe, 0x18, {0x1a0}}, @uexit={0x0, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x3, 0x0, 0x1a1}}, @eret={0xe6, 0x18, 0x80000000}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1400, 0x10, 0x1}}, @code={0xa, 0x9c, {"40ac85d20040b0f2810180d2020080d2630180d2440180d2020000d400fc007f0070000f000b97d200a0b8f2610080d2820180d2e30180d2840080d2020000d4000028d580838bd200e0b8f2210180d2220180d2e30080d2440180d2020000d4007008d520da92d20080b0f2e10180d2020180d2a30180d2440080d2020000d4007008d5007008d5"}}, @uexit={0x0, 0x18}, @hvc={0x32, 0x40, {0x4000, [0x80, 0x7, 0x4dde3961, 0x0, 0x2]}}, @uexit={0x0, 0x18, 0x5b6d}, @code={0xa, 0x9c, {"00f991d20080b0f2810080d2e20180d2430080d2a40080d2020000d4c0a291d200c0b0f2e10180d2020180d2a30080d2240080d2020000d4a02090d200a0b0f2c10080d2220080d2230080d2c40180d2020000d4000040380008c05a000008d500c987d20000b8f2a10180d2620080d2030080d2c40080d2020000d4000028d50000c00c008008d5"}}], 0x288}, &(0x7f00000000c0)=[@featur2={0x1, 0xaa}], 0x1) mmap$KVM_VCPU(&(0x7f0000e01000/0x2000)=nil, 0x0, 0x200000f, 0x12, r6, 0x0) (async) r7 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r9, 0x1, 0x100) (async) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) (async) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000640)={0x8, 0x0, [{0x44, 0x5, 0x1, 0x0, @adapter={0x80000001, 0x8000000000000000, 0x6, 0x4, 0x58d}}, {0xc12, 0x5, 0x1, 0x0, @msi={0xe0, 0x2, 0x6, 0x1000}}, {0x0, 0x2, 0x0, 0x0, @adapter={0x3, 0xee3, 0x2, 0x6, 0x5}}, {0xfffffff9, 0x2, 0x0, 0x0, @sint={0x3, 0x7fffffff}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x8, 0x9}}, {0x5, 0x4, 0x1, 0x0, @sint={0xffffffff, 0xd07}}, {0x7, 0x3, 0x1, 0x0, @sint={0x0, 0x8}}, {0x6900, 0x5, 0x0, 0x0, @sint={0x0, 0x8}}]}) (async) r11 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r11, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000080)={0x1ff, 0xa, 0x1}}) (async) r12 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000240)={0x3, 0x9}}) 32m22.94915337s ago: executing program 3 (id=322): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x2f) r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r3 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r2, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, 0x0, 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) openat$kvm(0x0, 0x0, 0x80, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r7, 0x8000ae83, &(0x7f0000000300)) (async) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r4, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000200)=@arm64_core={0x603000000010003a, &(0x7f00000001c0)=0x9}) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)=@attr_other={0x0, 0x4, 0x3, 0x0}) 32m13.089625076s ago: executing program 3 (id=323): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}, @its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x40}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x4, 0x0, 0x0}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r7 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r7, 0xffffffffffffffff) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r7, 0xfffffffffffffffe) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@its_setup={0x82, 0x28, {0x1, 0x81, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r8, 0x1, 0x100) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x17) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 32m11.70677154s ago: executing program 2 (id=324): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) r6 = syz_kvm_vgic_v3_setup(r4, 0x2, 0x80) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000200)=@attr_arm64={0x0, 0x6, 0x3, 0x0}) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) 32m0.472108508s ago: executing program 3 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000140)={0x2, 0x79}) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x3}) 31m59.437670216s ago: executing program 2 (id=326): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x1, 0x200, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r5, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r5, 0x4004aec2, &(0x7f0000000000)=0x4) 31m49.914308526s ago: executing program 3 (id=327): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r3 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000000)=0x4}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) r14 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x3, 0x180) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 31m45.7406312s ago: executing program 2 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) close(r0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfb7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xa5) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) close(r0) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfb7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xa5) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0) (async) 31m2.558476687s ago: executing program 34 (id=327): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r3 = syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x6, 0x4, &(0x7f0000000000)=0x4}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f00000011c0)=@attr_set_pmu={0x0, 0x0, 0x3, 0x0}) r14 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r9, 0x3, 0x180) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 30m56.778298168s ago: executing program 35 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) close(r0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfb7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xa5) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) close(r0) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfb7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xa5) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2, 0x4f832, 0xffffffffffffffff, 0x0) (async) 22m4.321772215s ago: executing program 5 (id=343): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x8}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x5, 0xfffffffe, 0x0, 0x0, 0x79}}], 0x50}, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f0000000040)=@arm64_fw={0x6030000000140000, &(0x7f0000000000)=0x10003}) r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r14 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f0000000300)=[@memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x20020, 0x1f, 0x4}}, @hvc={0x32, 0x40, {0xc5000021, [0x5, 0x800, 0xa, 0x9, 0x3ff]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x33e}}, @uexit={0x0, 0x18, 0x5}, @smc={0x1e, 0x40, {0xffff, [0x80000000, 0x7, 0x2, 0x5, 0x8]}}, @memwrite={0x6e, 0x30, @generic={0x0, 0xdce, 0x7fffffff, 0xd}}, @mrs={0xbe, 0x18, {0x603000000013d807}}, @code={0xa, 0x6c, {"000028d5007008d560658ad200c0b8f2210080d2420180d2c30180d2c40180d2020000d4007008d5000000b2007008d50008201e00000054a0278fd20060b8f2010180d2020080d2230080d2a40180d2020000d4000028d5"}}, @mrs={0xbe, 0x18, {0x603000000013f088}}, @smc={0x1e, 0x40, {0x3f000000, [0x2, 0x7, 0x6d, 0x1dd217948000000, 0x6]}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0x1}}, @uexit={0x0, 0x18, 0x3ff}, @memwrite={0x6e, 0x30, @generic={0x2, 0x28d, 0x7, 0x8}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0xa, 0x7, 0x9, 0x3}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x3, 0x4, 0x6, 0x8, 0x1}}, @svc={0x122, 0x40, {0xc4000003, [0x6, 0x4, 0x4, 0x2, 0x8001]}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @svc={0x122, 0x40, {0xc4000012, [0x0, 0x9, 0x0, 0x9, 0x6]}}, @code={0xa, 0x6c, {"007008d500008078007008d5007008d5c07499d200e0b0f2810180d2c20080d2e30180d2640080d2020000d4e04183d200c0b8f2210180d2020080d2c30180d2640080d2020000d40000402c0074002f000028d500b8200e"}}, @mrs={0xbe, 0x18, {0x6030000000138035}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x1, 0x2, 0x40, 0x6, 0x4}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80e0000, 0x48, 0x6}}, @uexit={0x0, 0x18, 0x2}, @hvc={0x32, 0x40, {0x84000003, [0x0, 0x7, 0x6, 0x0, 0xfffffffffffffeff]}}, @code={0xa, 0x84, {"030000d400802088000c40bc009c006f00a8312e205b80d20020b0f2c10180d2620080d2430180d2640080d2020000d4007008d5008008d520f499d20060b8f2210180d2a20180d2c30180d2e40080d2020000d4a0d68cd200a0b0f2810180d2e20080d2030080d2a40080d2020000d4"}}], 0x50c}, &(0x7f00000001c0)=[@featur2], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r14, 0xaead) syz_kvm_setup_cpu$arm64(r8, r13, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r13, 0x4004aec2, &(0x7f0000000000)=0x4) munmap(&(0x7f000072b000/0x1000)=nil, 0x1000) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000002c0)=@arm64_sys={0x603000000013df19, &(0x7f0000000280)=0x1}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) write$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) 21m47.574426795s ago: executing program 4 (id=345): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) (async) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x21) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r9, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xbfb615fdf272adf7, 0x13, r4, 0x0) (async) r11 = openat$kvm(0x0, &(0x7f0000000000), 0x501000, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0x40086602, 0x110e227ffe) (async) r12 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) (async) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r14 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r13, 0x3, 0x11, r6, 0x0) r15 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r13, 0x3, 0x11, r12, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) syz_kvm_assert_syzos_uexit$arm64(r15, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_kvm_assert_syzos_uexit$arm64(r14, 0xfffffffffffffffe) (async) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r17, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x2, 0x8000000, 0x1000, &(0x7f0000c42000/0x1000)=nil}) 21m40.953762046s ago: executing program 5 (id=346): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) (async) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@hvc={0x32, 0x40, {0x80000001, [0xfffffffffffffde5, 0x3ff, 0x1, 0x4, 0x9]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x40000000000032) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) r8 = openat$kvm(0x0, &(0x7f0000000100), 0x200883, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async, rerun: 32) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x6832, 0xffffffffffffffff, 0x0) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) (async) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) r14 = eventfd2(0x5, 0x801) write$eventfd(r14, &(0x7f0000000180)=0x1, 0x8) (async) mmap$KVM_VCPU(&(0x7f0000fb6000/0x2000)=nil, r13, 0x2000000, 0x2b111, r12, 0x0) (async) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x7}) (async, rerun: 64) eventfd2(0x8801, 0x800) (async, rerun: 64) r15 = eventfd2(0x3ff, 0x80800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r15, 0x5, 0x0, r14}) 21m29.758292082s ago: executing program 4 (id=347): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x12) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x12) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000000)={0x0, &(0x7f0000000400)=[@hvc={0x32, 0x40, {0x84000053, [0x8, 0x8, 0x1, 0x8, 0x100]}}], 0x40}, 0x0, 0x0) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@hvc={0x32, 0x40, {0x86000001, [0xc, 0x5, 0x2, 0xfffffffffffffffc, 0x52]}}], 0xffffffb5}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000000)=0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x1, 0x4, &(0x7f0000000000)=0x4}) close(r1) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x4}) (async) ioctl$KVM_CAP_HALT_POLL(r10, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x4}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0xdddd1000, 0x123000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000000)={0x80a0000, 0x0, 0x1}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000000)={0x80a0000, 0x0, 0x1}) r11 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000e0f000/0x4000)=nil, 0x0, 0x2000004, 0x13, r12, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000e0f000/0x4000)=nil, 0x0, 0x2000004, 0x13, r12, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x35) (async) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x35) eventfd2(0x2, 0x80000) 21m24.428298232s ago: executing program 5 (id=348): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, 0x0}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x3, 0xfffffffd}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21m8.880356516s ago: executing program 4 (id=349): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_vgic_v3_setup(r2, 0x2, 0x160) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x3, 0x3, 0xfffffffffffffffe}) 20m57.628690608s ago: executing program 5 (id=350): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x9, 0x0, 0x80}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r7, 0x4004aec2, &(0x7f0000000000)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20m56.927819441s ago: executing program 4 (id=351): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x3c1f03, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000180)={0x5, 0x1d}) (async) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve={0x6080000000150377, 0x0}) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xc, 0x5c1fd1b65647af1, 0xffffffffffffffff, 0x20000000) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r9, 0x800454cf, 0x200000000000000) (async) r10 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000038000/0x1000)=nil, 0x930, 0x1, 0x30, 0xffffffffffffffff, 0x0) (async) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bfd000/0x400000)=nil) 20m44.43092544s ago: executing program 4 (id=352): mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x2000003, 0x11, r2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x2000)=nil, r4, 0x2000009, 0x11, r2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000680)="38ce8347fc1e86008cfc72bb352c8659dcc9225b48cb5cb00c73b0b33018748e73f7f1f493e89c859e17625ad1b19ca88da9c227db3473a7fd4ce992bfc316bd22ccc646cd69c728", 0x0, 0x48) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r10, 0xa, 0x16831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 20m39.549261097s ago: executing program 5 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = mmap$KVM_VCPU(&(0x7f0000c60000/0x2000)=nil, r1, 0x300000a, 0x16831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000000c0)="e65bf643e6e1a3ffc871fcc8064f26b4d9f94b6f1ccd7b41443d2b5486580143226c0ead9a1620b6709fafba2af023314cc4bf610d6a743ad4913910b8364e5f73ea2fc43ac1ebfc", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 20m27.330423874s ago: executing program 4 (id=354): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000140)=0x7}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur2={0x1, 0xf}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x4, &(0x7f0000000080)=0xbced}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0xae03, 0x7e) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000000)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000100)=0x10000}) r16 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000100)=@arm64_fp={0x60c00000001000ab, &(0x7f0000000000)=0x4d}) 20m21.912649369s ago: executing program 5 (id=355): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x34000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0x40086602, 0x110e227ffe) r14 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r16 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r8, 0x0) r17 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r15, 0x3, 0x11, r14, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r17, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x7}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r16, 0xfffffffffffffffe) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffff801, 0x7e, 0x2}}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) 19m39.679108193s ago: executing program 36 (id=354): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000000c0)=@arm64_core={0x6030000000100038, &(0x7f0000000140)=0x7}) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000280)=[@featur2={0x1, 0xf}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r7, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x4, &(0x7f0000000080)=0xbced}) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x31) r13 = syz_kvm_setup_syzos_vm$arm64(r12, &(0x7f0000c00000/0x400000)=nil) r14 = syz_kvm_add_vcpu$arm64(r13, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r15, 0xae03, 0x7e) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000000)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000100)=0x10000}) r16 = syz_kvm_add_vcpu$arm64(r10, &(0x7f0000000280)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r16, 0x4010aeac, &(0x7f0000000100)=@arm64_fp={0x60c00000001000ab, &(0x7f0000000000)=0x4d}) 19m29.461169366s ago: executing program 37 (id=355): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x34000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x21) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r11, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r11, 0x0) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r13, 0x40086602, 0x110e227ffe) r14 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r3, 0x2, 0x100) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r16 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r8, 0x0) r17 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r15, 0x3, 0x11, r14, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r17, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x7}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r16, 0xfffffffffffffffe) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffff801, 0x7e, 0x2}}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) 11m41.506672656s ago: executing program 6 (id=356): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000caa000/0x3000)=nil, 0x0, 0x1000003, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x296b01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@svc={0x122, 0x40, {0x84000000, [0x8, 0x7, 0x8, 0x4, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r14, 0x3, 0x11, r9, 0xc000) syz_kvm_assert_syzos_uexit$arm64(0x0, 0x1) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f00005b7000/0x400000)=nil) r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x23ac5f9b426e84b2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r17, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0xa, 0x0}) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000100)) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) 11m33.460975829s ago: executing program 7 (id=357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6e8401, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x80042, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000000c0)="3cdb3371c117bf25f418cedeced7826f82b605cf78dfe4af5c1423be743ae235f28a3dacf2687ad2470159a79961cfb1a58908a5fd2431356b18a4c5d20cfeb4b26e9719e5b4adba", 0x0, 0x48) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r8, 0x3}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, r8, 0xb}) write$eventfd(r8, &(0x7f0000000080)=0x3, 0x8) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000140)={0xc, 0xfff9, 0x1}}) mmap$KVM_VCPU(&(0x7f0000e24000/0x4000)=nil, r2, 0x100000c, 0x810, r5, 0x0) 11m13.866541266s ago: executing program 7 (id=358): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x6) 10m49.210817427s ago: executing program 38 (id=356): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000caa000/0x3000)=nil, 0x0, 0x1000003, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fb707cd24b7eebb20700000000000000000000000100", 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x296b01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000140), 0x40480, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000180)={0x0, &(0x7f00000003c0)=[@svc={0x122, 0x40, {0x84000000, [0x8, 0x7, 0x8, 0x4, 0x6]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r14, 0x3, 0x11, r9, 0xc000) syz_kvm_assert_syzos_uexit$arm64(0x0, 0x1) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f00005b7000/0x400000)=nil) r15 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x23ac5f9b426e84b2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r16, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r17, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x8, 0xa, 0x0}) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000100)) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) 10m23.230725983s ago: executing program 39 (id=358): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x6) 2m20.507682935s ago: executing program 8 (id=359): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x40000004}}, @smc={0x1e, 0x40, {0x84000001, [0x800, 0x8, 0xfffffffffffffffd, 0x9, 0x7]}}], 0x68}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r6, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$arm64(r5, r6, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) (async) openat$kvm(0x0, 0x0, 0x72483, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, r9, &(0x7f0000e8a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, 0x0) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r10, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m1.306685575s ago: executing program 8 (id=361): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x84000053, [0x80000000000, 0x6, 0xf1, 0x6f4, 0x1]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000f81000/0x3000)=nil, r4, 0x1, 0x4010, r3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0x40, {0x84000053, [0x80000000000, 0x6, 0xf1, 0x6f4, 0x1]}}], 0x40}, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000f81000/0x3000)=nil, r4, 0x1, 0x4010, r3, 0x0) (async) 1m42.721959458s ago: executing program 8 (id=362): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013dce5, 0x7fff}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0xffffffffffffffff, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r5, 0x4, 0x220) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) close(r4) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m38.950444593s ago: executing program 9 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x28) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0xc018ae85, 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x2000}) r5 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000540)={0x0, 0x0}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000980)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m20.351746353s ago: executing program 8 (id=363): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x3, 0xa0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$arm64(r10, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_HALT_POLL(r14, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x81}) r16 = syz_kvm_add_vcpu$arm64(r15, &(0x7f0000000080)={0x0, &(0x7f0000000280)=[@irq_setup={0x46, 0x18, {0x0, 0x10b}}, @hvc={0x32, 0x40, {0x8400000a, [0x80000001, 0xb0, 0x6, 0x8000000000000000, 0xa]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x3dc}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x10040, 0x2, 0x4}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x1, 0x0, 0x5, 0x1, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013e180}}, @eret={0xe6, 0x18, 0x6}, @msr={0x14, 0x20, {0x603000000013c664, 0x1}}, @svc={0x122, 0x40, {0x80000002, [0x0, 0x7, 0x4, 0x7, 0x6]}}, @mrs={0xbe, 0x18, {0x603000000013c03a}}, @code={0xa, 0x97, {"605190d20040b8f2a10080d2c20080d2830180d2c40180d2020000d48008d5007c89d20060b0f2410080d2e20180d2430080d2c40180d2020000d4007008d5a08781d20060b8f2a10080d2c20180d2c30180d2640180d2020000d40004805a000008d50004002f60ed91d20000b0f2c10180d2a20080d2640180d2020000d40094202e"}}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0xf, 0xd, 0x3}}, @smc={0x1e, 0x40, {0x8000, [0x4, 0x4, 0x5, 0x80000000000, 0x3]}}, @eret={0xe6, 0x18, 0x13}, @msr={0x14, 0x20, {0x603000000013c102, 0x4}}, @smc={0x1e, 0x40, {0x100, [0x7, 0x8, 0x5aa, 0x9, 0x80]}}, @code={0xa, 0x9c, {"007008d5c07b8fd20060b8f2e10180d2e20080d2e30180d2640080d2020000d4802291d20040b0f2a10180d2a20080d2230080d2240080d2020000d4e0cf8dd200a0b0f2c10080d2020180d2630080d2e40080d2020000d40008a078008008d50080009b40e18ad200e0b8f2610180d2020180d2e30180d2040180d2020000d4007008d5007008d5"}}, @irq_setup={0x46, 0x18, {0x1, 0x26}}, @msr={0x14, 0x20, {0x603000000013c00d, 0x3}}, @mrs={0xbe, 0x18, {0x6030000000130203}}, @code={0xa, 0x6c, {"0000c09b007008d500a0e00d0020000e20dc9cd200e0b0f2610080d2620180d2430080d2840180d2020000d4008008d5007008d50098a10e00a49f0d00df8ad20040b0f2e10080d2e20080d2230080d2440180d2020000d4"}}, @its_setup={0x82, 0x28, {0x4, 0x4, 0x2bb}}, @uexit={0x0, 0x18, 0x4}], 0x48f}, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) r17 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r12, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r17, 0x2000000, 0x14012, r11, 0x0) r18 = syz_kvm_add_vcpu$arm64(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x2, 0xfffffffffffffffd, 0x5}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r6, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r19, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x3, 0x2, &(0x7f0000000240)=0x31aa1fb3}) ioctl$KVM_RUN(r18, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.791160222s ago: executing program 9 (id=364): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x4068aea3, &(0x7f0000000000)) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000004c0)={0x2, 0x80, 0x200, &(0x7f00000000c0)=[0x80000000, 0x7f, 0x8, 0x80000001, 0x8d87, 0x7fff, 0xfffffffffffffff9, 0x8, 0x8, 0x7fffffffffffffff, 0x80, 0x1, 0x6200000, 0x8, 0x400, 0x81, 0x8000000000000001, 0x6, 0x7, 0x1, 0x3115, 0x80000001, 0xb9a, 0x100, 0x7, 0x2, 0x7, 0x312ed4db, 0xfffffffffffffffb, 0x4, 0x0, 0x100, 0x1, 0x101, 0x5, 0xffff, 0x1, 0x81, 0xffff, 0x5, 0x2, 0x4, 0x3, 0x10, 0x2, 0x5, 0x56a, 0x401, 0x99f, 0x2, 0xd7, 0x3, 0x2, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0x5, 0x100, 0x4, 0x3, 0x8, 0x6, 0x1, 0x80000001, 0x9, 0xe5e7, 0x4, 0x0, 0xe, 0x400, 0x9, 0x101, 0x6be, 0x3, 0x6, 0x7, 0x0, 0xa, 0x6, 0x9, 0x8, 0x4e0, 0xc, 0x5d77, 0x1000, 0x3, 0x401, 0xffff, 0x7ff, 0x9, 0x120000, 0x7, 0x6, 0x5, 0x10001, 0x200, 0x6, 0x100000001, 0x4271, 0x5f, 0x7, 0xfffffffffffffffb, 0x9, 0xffffffffad773b27, 0x1c00000000, 0x81, 0x9, 0x3, 0xad6, 0x5, 0x9, 0x0, 0x7f, 0x4, 0x1, 0x6, 0x3d, 0x6, 0x1, 0x9, 0x100000001, 0xffffffff, 0x200, 0xcf7, 0x1000, 0x8]}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000500)={0x4, 0x6, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x9, r1}) (async) close(r2) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000600)=@attr_arm64={0x0, 0x7, 0x1, &(0x7f00000005c0)=0x83}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a) ioctl$KVM_ARM_SET_COUNTER_OFFSET(r3, 0x4010aeb5, &(0x7f0000000640)={0x4, 0x1}) syz_kvm_setup_cpu$arm64(r3, r1, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000ac0)=[{0x0, &(0x7f0000000680)=[@code={0xa, 0x6c, {"000028d5007008d5c05b91d200a0b0f2210180d2a20180d2a30080d2a40180d2020000d4000480da205e96d200a0b0f2410180d2620080d2830080d2640180d2020000d4000000d25f3003d500a0400c0020c00d007008d5"}}, @svc={0x122, 0x40, {0x40, [0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1]}}, @irq_setup={0x46, 0x18, {0x3, 0x180}}, @eret={0xe6, 0x18, 0x78}, @svc={0x122, 0x40, {0x84000009, [0xffff000000000000, 0xfffffffffffffc00, 0x6, 0x1, 0x7f]}}, @mrs={0xbe, 0x18, {0x603000000013c101}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x3, 0x1, 0x8, 0x6, 0x2}}, @eret={0xe6, 0x18, 0x6}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x3c}}, @smc={0x1e, 0x40, {0x80000001, [0x100000001, 0xfff, 0x8, 0x8]}}, @eret={0xe6, 0x18, 0x8}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0xc, 0xc, 0x2ac6, 0x2}}, @smc={0x1e, 0x40, {0x8600ff01, [0x2, 0xba4c, 0x7, 0x8, 0x66]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe4, 0x2, 0x2}}, @hvc={0x32, 0x40, {0x80000000, [0xb9b6, 0x2, 0x10001, 0x7f, 0x8]}}, @mrs={0xbe, 0x18, {0x6030000000139808}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x3, 0xc, 0x5, 0x3, 0x2}}, @hvc={0x32, 0x40, {0x84000008, [0x3, 0xfffffffffffff65c, 0x1, 0xc, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x2, 0x2, 0x3, 0x3, 0x3}}, @hvc={0x32, 0x40, {0xbac086098fae7ec3, [0xfffffffffffffffa, 0x100, 0x5, 0x7, 0x5]}}, @uexit={0x0, 0x18, 0x3}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x2, 0x8, 0xd701, 0x6, 0x2}}, @svc={0x122, 0x40, {0x1, [0x9, 0x8, 0x348, 0x9, 0x2]}}], 0x434}], 0x1, 0x0, &(0x7f0000000b00)=[@featur2], 0x1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000b40)={0x200, 0xfffffff9, 0x81}) (async) r4 = syz_kvm_vgic_v3_setup(r3, 0x1, 0x180) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000bc0)=@attr_other={0x0, 0x800, 0x400, &(0x7f0000000b80)=0x3}) (async) r5 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000001000)={0x1, 0x2c0, 0x340, &(0x7f0000000c00)=[0x1, 0xf, 0x9, 0x0, 0x100000000, 0x5, 0xfffffffffffffff7, 0x7, 0x1, 0x0, 0xf, 0x8, 0x99, 0x8, 0xffffffffffffffff, 0x8, 0x8001, 0x10000, 0x6, 0x6, 0x3, 0xd6, 0x7, 0xd7f2, 0x8000000000000000, 0x3, 0x2, 0x1, 0x7, 0x80, 0x1, 0xfffffffffffff796, 0xffffffffffffffff, 0xa, 0x9, 0x4, 0xc, 0x8000000000000000, 0xfffffffffffffffd, 0x2, 0x5, 0xfffffffffffff800, 0x3ff, 0x7, 0x80, 0x401, 0xa, 0x7ff, 0xeee, 0x0, 0x9, 0x1, 0x1ff, 0x0, 0x6, 0xd5, 0x4, 0x63, 0xe000000000, 0x2738, 0x838, 0x1, 0x2, 0xffff, 0x81, 0x101, 0x4d, 0x9, 0x4, 0x2, 0x6, 0x9, 0xfffffffffffffffa, 0x4, 0x8000000000000001, 0x4, 0x8, 0x1, 0x0, 0x6, 0x6, 0x6525, 0x969e, 0x7, 0x6, 0x7fff, 0x6, 0x100, 0xf1a, 0x11, 0x0, 0x9, 0x1, 0xc, 0x5, 0x5, 0x7fff, 0x7, 0x1, 0x3, 0xcca, 0xe2, 0xffffffffffffff7f, 0xed, 0x11, 0x0, 0x6594, 0xfffffffffffffffe, 0x8, 0x3, 0x6, 0x7, 0xe, 0x25b, 0xfffffffffffffff7, 0x8, 0xfffffffffffffffb, 0x1, 0x1, 0x101, 0x7, 0x9, 0x7, 0x100000001, 0xffff, 0x8000, 0x3, 0x7]}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001040)={0x11106000, 0x1000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f00000010c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000001080)={0x7, 0x8, 0x1}}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000001140)=@arm64_core={0x603000000010003e, &(0x7f0000001100)=0x5}) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000001180)={0xffffffffffffffff, 0x90, 0x3, r5}) (async) ioctl$KVM_GET_SREGS(r1, 0x8000ae83, &(0x7f00000011c0)) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000001300)={0x8, 0x0, [{0x8, 0x5, 0x1, 0x0, @adapter={0x1, 0x0, 0xbd, 0x5, 0x4}}, {0x1, 0x4, 0x1, 0x0, @sint={0x100, 0x32}}, {0x7d, 0x2, 0x1, 0x0, @adapter={0x7ff, 0x1, 0x3, 0x7fffffff, 0x8}}, {0x2ba56173, 0x5, 0x1, 0x0, @sint={0x9, 0x5}}, {0x8, 0x2, 0x1, 0x0, @msi={0xfff, 0xdb8, 0x1, 0x8}}, {0x27a, 0x4, 0x1, 0x0, @sint={0x2, 0x7}}, {0x3, 0xb, 0x0, 0x0, @msi={0x8, 0x7f, 0x9, 0x9}}, {0x1, 0x2, 0x1, 0x0, @adapter={0x6, 0x5, 0x5, 0x2, 0x6}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r8 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f00000018c0)={0x2, 0x2c0, 0xc0, &(0x7f00000014c0)=[0x87, 0x5, 0xffffffffffffffff, 0x80000001, 0xea0, 0x80, 0xfffffffffffffffb, 0x3, 0xca1e, 0x5, 0x5, 0x1c5, 0x3, 0x401, 0xfff, 0x4, 0x6, 0x9, 0x9, 0x5, 0x1a, 0xa0f, 0x8, 0x0, 0x10001, 0x1, 0xfffffffffffffffd, 0x1000, 0x2, 0x0, 0x1, 0xe, 0x4, 0x43ef, 0xba72, 0x4, 0xf05, 0x10, 0x7, 0x10000, 0x0, 0xdb, 0xf, 0xaef3, 0xb8a, 0x1000, 0x4a, 0x3, 0x5, 0x3, 0x2, 0x8, 0x1, 0x2, 0x4, 0xa, 0x1ff, 0x1, 0x1, 0x4497, 0x4, 0xa05b, 0x77, 0x9, 0x4d, 0x721, 0x81, 0x9, 0x6c71834c, 0xb32a, 0x3, 0x3, 0x1ff, 0x1, 0xffffffffffffff80, 0x6e06, 0x3, 0x4, 0xffffffff, 0xff, 0x1, 0x3b5, 0x401, 0x4, 0x8, 0xa2dd, 0x1000, 0x8, 0x1ff, 0x8000000000000001, 0x3, 0x4, 0xe, 0x9827, 0x7ff, 0xfffffffffffffff7, 0x2, 0xfffffffffffffff7, 0x7f, 0x0, 0x5, 0x8001, 0x3e1, 0x7, 0x0, 0xa72a, 0x4, 0xe1, 0x7067, 0x82, 0x3, 0x5000000000, 0xfffffffffffffb21, 0x0, 0x2, 0x7f, 0xffffffffffffffa4, 0xa9, 0x1, 0x8, 0x7, 0x29f, 0x8, 0x8001, 0xfffffffffffffffb, 0x6, 0x9, 0x2]}) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000001900)={0x6, 0xffffffffffffffff, 0x1}) (async) close(r0) 1m0.986848003s ago: executing program 9 (id=365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) 48.896143016s ago: executing program 8 (id=366): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000100), 0x82001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r5, 0x0) r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000080)=@arm64_extra={0x603000000013c103, &(0x7f0000000000)=0x6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r9, 0x2}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x4, 0xd000, 0x8, r9, 0xa}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r9, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r11 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x12}) ioctl$KVM_CREATE_VM(r11, 0x401c5820, 0x20000000) ioctl$KVM_GET_STATS_FD_vm(r10, 0xaece) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0x80111500, 0x20000000) r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x280680, 0x0) mmap$KVM_VCPU(&(0x7f0000e5f000/0x3000)=nil, r15, 0x3, 0x13, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r15, 0x6000006, 0x40010, 0xffffffffffffffff, 0x0) 13.205991898s ago: executing program 40 (id=365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x0, 0x1}}) 0s ago: executing program 41 (id=366): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000100), 0x82001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r5, 0x0) r6 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000080)=@arm64_extra={0x603000000013c103, &(0x7f0000000000)=0x6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0x0, 0x1, r9, 0x2}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x4, 0xd000, 0x8, r9, 0xa}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r9, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) r11 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x12}) ioctl$KVM_CREATE_VM(r11, 0x401c5820, 0x20000000) ioctl$KVM_GET_STATS_FD_vm(r10, 0xaece) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0x80111500, 0x20000000) r14 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x280680, 0x0) mmap$KVM_VCPU(&(0x7f0000e5f000/0x3000)=nil, r15, 0x3, 0x13, r13, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, r15, 0x6000006, 0x40010, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 388.309820][ T3150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.557884][ T3150] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:52091' (ED25519) to the list of known hosts. [ 606.119916][ T25] audit: type=1400 audit(605.330:60): avc: denied { name_bind } for pid=3308 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 607.326102][ T25] audit: type=1400 audit(606.540:61): avc: denied { execute } for pid=3309 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 607.366047][ T25] audit: type=1400 audit(606.580:62): avc: denied { execute_no_trans } for pid=3309 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 629.892078][ T25] audit: type=1400 audit(629.100:63): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 629.928644][ T25] audit: type=1400 audit(629.130:64): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 630.014846][ T3309] cgroup: Unknown subsys name 'net' [ 630.067551][ T25] audit: type=1400 audit(629.280:65): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 630.473862][ T3309] cgroup: Unknown subsys name 'cpuset' [ 630.576526][ T3309] cgroup: Unknown subsys name 'rlimit' [ 631.513852][ T25] audit: type=1400 audit(630.730:66): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 631.532127][ T25] audit: type=1400 audit(630.740:67): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 631.557825][ T25] audit: type=1400 audit(630.770:68): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 632.735296][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 632.755819][ T25] audit: type=1400 audit(631.960:69): avc: denied { relabelto } for pid=3312 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 632.783107][ T25] audit: type=1400 audit(631.990:70): avc: denied { write } for pid=3312 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 632.966064][ T25] audit: type=1400 audit(632.180:71): avc: denied { read } for pid=3309 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 632.983009][ T25] audit: type=1400 audit(632.190:72): avc: denied { open } for pid=3309 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 633.029290][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 683.635828][ T25] audit: type=1400 audit(682.850:73): avc: denied { execmem } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 688.142242][ T25] audit: type=1400 audit(687.350:74): avc: denied { read } for pid=3315 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 688.169567][ T25] audit: type=1400 audit(687.380:75): avc: denied { open } for pid=3315 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 688.252176][ T25] audit: type=1400 audit(687.460:76): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 688.496542][ T25] audit: type=1400 audit(687.710:77): avc: denied { module_request } for pid=3316 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 689.625538][ T25] audit: type=1400 audit(688.840:78): avc: denied { sys_module } for pid=3315 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 718.984165][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.329591][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.393653][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.623737][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.823734][ T3316] hsr_slave_0: entered promiscuous mode [ 731.851434][ T3316] hsr_slave_1: entered promiscuous mode [ 732.711829][ T3315] hsr_slave_0: entered promiscuous mode [ 732.745516][ T3315] hsr_slave_1: entered promiscuous mode [ 732.775199][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 732.782765][ T3315] Cannot create hsr debugfs directory [ 738.412640][ T25] audit: type=1400 audit(737.620:79): avc: denied { create } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.482342][ T25] audit: type=1400 audit(737.640:80): avc: denied { write } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.527269][ T25] audit: type=1400 audit(737.740:81): avc: denied { read } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.648600][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.045732][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.394968][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 739.703227][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 741.336890][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 741.575168][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 741.783179][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 741.966645][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.899045][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.327810][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.136183][ T3316] veth0_vlan: entered promiscuous mode [ 817.703124][ T3316] veth1_vlan: entered promiscuous mode [ 820.074841][ T3316] veth0_macvtap: entered promiscuous mode [ 820.486679][ T3316] veth1_macvtap: entered promiscuous mode [ 822.145882][ T3315] veth0_vlan: entered promiscuous mode [ 823.353380][ T3315] veth1_vlan: entered promiscuous mode [ 823.863178][ T3414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.973924][ T3414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.978073][ T3414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.992932][ T3414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.161758][ T25] audit: type=1400 audit(826.370:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 827.382591][ T3315] veth0_macvtap: entered promiscuous mode [ 827.461036][ T25] audit: type=1400 audit(826.660:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.Fb3ZSd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 827.772371][ T25] audit: type=1400 audit(826.980:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 827.925319][ T3315] veth1_macvtap: entered promiscuous mode [ 828.232407][ T25] audit: type=1400 audit(827.400:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.Fb3ZSd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 828.405934][ T25] audit: type=1400 audit(827.620:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/syzkaller.Fb3ZSd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 829.331602][ T25] audit: type=1400 audit(828.530:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 829.706383][ T25] audit: type=1400 audit(828.870:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 829.803141][ T25] audit: type=1400 audit(829.010:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 830.287451][ T25] audit: type=1400 audit(829.490:90): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 830.504209][ T25] audit: type=1400 audit(829.690:91): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 831.004869][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.009696][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.084569][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.103530][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.747154][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 833.682377][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 833.701259][ T25] audit: type=1400 audit(832.870:93): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.732199][ T25] audit: type=1400 audit(832.940:94): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.814241][ T25] audit: type=1400 audit(833.000:95): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 843.832713][ T25] audit: type=1400 audit(843.040:96): avc: denied { read } for pid=3475 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 843.869843][ T25] audit: type=1400 audit(843.070:97): avc: denied { open } for pid=3475 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 844.306129][ T25] audit: type=1400 audit(843.520:98): avc: denied { ioctl } for pid=3475 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 849.931611][ T25] audit: type=1400 audit(849.140:99): avc: denied { append } for pid=3481 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 854.562918][ T25] audit: type=1400 audit(853.720:100): avc: denied { execute } for pid=3481 comm="syz.1.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 873.317708][ T25] audit: type=1400 audit(872.530:101): avc: denied { setattr } for pid=3496 comm="syz.1.9" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 899.526197][ T25] audit: type=1400 audit(898.740:102): avc: denied { write } for pid=3515 comm="syz.0.15" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 946.344630][ T25] audit: type=1400 audit(945.550:103): avc: denied { map } for pid=3545 comm="syz.0.24" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 946.383331][ T25] audit: type=1400 audit(945.590:104): avc: denied { execute } for pid=3545 comm="syz.0.24" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1410.697122][ T25] audit: type=1400 audit(1409.910:105): avc: denied { map } for pid=3827 comm="syz.0.109" path="pipe:[2797]" dev="pipefs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1993.648306][ T4184] kvm [4184]: Failed to find VMA for hva 0x21016000 [ 2225.557614][ T4322] debugfs: 'vgic-its-state@8080000' already exists in '4322-5' [ 2240.505642][ T4332] kvm [4332]: Failed to find VMA for hva 0x21016000 [ 2563.773641][ T4486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2563.996072][ T4486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2587.605944][ T4495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2587.896866][ T4495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2593.333283][ T4486] hsr_slave_0: entered promiscuous mode [ 2593.423575][ T4486] hsr_slave_1: entered promiscuous mode [ 2593.466641][ T4486] debugfs: 'hsr0' already exists in 'hsr' [ 2593.482203][ T4486] Cannot create hsr debugfs directory [ 2607.017779][ T4486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2607.399223][ T4486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2607.666351][ T4486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2607.907906][ T4486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2613.757335][ T4495] hsr_slave_0: entered promiscuous mode [ 2613.845863][ T4495] hsr_slave_1: entered promiscuous mode [ 2613.909279][ T4495] debugfs: 'hsr0' already exists in 'hsr' [ 2613.912011][ T4495] Cannot create hsr debugfs directory [ 2633.091479][ T4495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2633.649418][ T4495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2634.433823][ T4495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2634.961429][ T4495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2640.246404][ T4498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2641.277372][ T4498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2642.514639][ T4498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2643.638966][ T4498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.847770][ T4486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2660.719439][ T4498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2660.838308][ T4498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2660.937692][ T4498] bond0 (unregistering): Released all slaves [ 2662.942836][ T4498] hsr_slave_0: left promiscuous mode [ 2663.242171][ T4498] hsr_slave_1: left promiscuous mode [ 2664.165431][ T4498] veth1_macvtap: left promiscuous mode [ 2664.185427][ T4498] veth0_macvtap: left promiscuous mode [ 2664.193618][ T4498] veth1_vlan: left promiscuous mode [ 2664.227188][ T4498] veth0_vlan: left promiscuous mode [ 2684.645912][ T4498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2686.212619][ T4498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2687.606298][ T4498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2688.867997][ T4498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.615484][ T4498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2708.974109][ T4498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2709.413178][ T4498] bond0 (unregistering): Released all slaves [ 2711.575854][ T4498] hsr_slave_0: left promiscuous mode [ 2711.652478][ T4498] hsr_slave_1: left promiscuous mode [ 2712.029685][ T4498] veth1_macvtap: left promiscuous mode [ 2712.069616][ T4498] veth0_macvtap: left promiscuous mode [ 2712.089475][ T4498] veth1_vlan: left promiscuous mode [ 2712.106193][ T4498] veth0_vlan: left promiscuous mode [ 2727.204324][ T4495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2791.988040][ T4486] veth0_vlan: entered promiscuous mode [ 2792.648695][ T4486] veth1_vlan: entered promiscuous mode [ 2794.998480][ T4486] veth0_macvtap: entered promiscuous mode [ 2795.416938][ T4486] veth1_macvtap: entered promiscuous mode [ 2798.844998][ T3414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2798.847158][ T3414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2798.864084][ T3414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2798.901878][ T3414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2822.245053][ T4495] veth0_vlan: entered promiscuous mode [ 2823.283336][ T4495] veth1_vlan: entered promiscuous mode [ 2826.775118][ T4495] veth0_macvtap: entered promiscuous mode [ 2827.517716][ T4495] veth1_macvtap: entered promiscuous mode [ 2830.906388][ T4203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.926274][ T3414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.986677][ T3414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2830.994130][ T3414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3033.863009][ T3414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3035.804308][ T3414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3037.403702][ T3414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.815786][ T3414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3060.055684][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3060.678491][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3060.973828][ T3414] bond0 (unregistering): Released all slaves [ 3063.103115][ T3414] hsr_slave_0: left promiscuous mode [ 3063.192523][ T3414] hsr_slave_1: left promiscuous mode [ 3063.525898][ T3414] veth1_macvtap: left promiscuous mode [ 3063.541566][ T3414] veth0_macvtap: left promiscuous mode [ 3063.545872][ T3414] veth1_vlan: left promiscuous mode [ 3063.558191][ T3414] veth0_vlan: left promiscuous mode [ 3084.629058][ T3414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3085.967249][ T3414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.146676][ T3414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3088.485687][ T3414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3104.579400][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3104.685534][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3104.737634][ T3414] bond0 (unregistering): Released all slaves [ 3106.375091][ T3414] hsr_slave_0: left promiscuous mode [ 3106.493139][ T3414] hsr_slave_1: left promiscuous mode [ 3107.202106][ T3414] veth1_macvtap: left promiscuous mode [ 3107.203501][ T3414] veth0_macvtap: left promiscuous mode [ 3107.232972][ T3414] veth1_vlan: left promiscuous mode [ 3107.253005][ T3414] veth0_vlan: left promiscuous mode [ 3144.198629][ T4809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3144.584967][ T4809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3144.657575][ T4803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3145.068824][ T4803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3168.996889][ T4809] hsr_slave_0: entered promiscuous mode [ 3169.135781][ T4809] hsr_slave_1: entered promiscuous mode [ 3172.332567][ T4803] hsr_slave_0: entered promiscuous mode [ 3172.426219][ T4803] hsr_slave_1: entered promiscuous mode [ 3172.493502][ T4803] debugfs: 'hsr0' already exists in 'hsr' [ 3172.513945][ T4803] Cannot create hsr debugfs directory [ 3189.725021][ T4809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3190.397409][ T4809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3190.964721][ T4809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3192.201753][ T4809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3195.922484][ T4803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3196.238675][ T4803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3196.536944][ T4803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3196.839506][ T4803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3220.622795][ T4809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3224.849764][ T4803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3354.008198][ T4809] veth0_vlan: entered promiscuous mode [ 3355.026728][ T4809] veth1_vlan: entered promiscuous mode [ 3360.202375][ T4803] veth0_vlan: entered promiscuous mode [ 3360.344973][ T4809] veth0_macvtap: entered promiscuous mode [ 3361.484282][ T4809] veth1_macvtap: entered promiscuous mode [ 3362.336387][ T4803] veth1_vlan: entered promiscuous mode [ 3367.203629][ T4575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.204778][ T4575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.231964][ T4575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.236797][ T4575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3368.864277][ T4803] veth0_macvtap: entered promiscuous mode [ 3370.248380][ T4803] veth1_macvtap: entered promiscuous mode [ 3376.063560][ T5038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.200935][ T4572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.202035][ T4572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3376.209274][ T4572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3692.977564][ T3414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3695.074711][ T3414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3696.909739][ T3414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3698.636836][ T3414] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3726.195124][ T3414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3726.562599][ T3414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3726.873655][ T3414] bond0 (unregistering): Released all slaves [ 3732.952304][ T3414] hsr_slave_0: left promiscuous mode [ 3733.093911][ T3414] hsr_slave_1: left promiscuous mode [ 3734.232090][ T3414] veth1_macvtap: left promiscuous mode [ 3734.244854][ T3414] veth0_macvtap: left promiscuous mode [ 3734.268735][ T3414] veth1_vlan: left promiscuous mode [ 3734.344000][ T3414] veth0_vlan: left promiscuous mode [ 3766.017533][ T5238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3767.691541][ T5238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3769.166354][ T5238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3770.717786][ T5238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3793.237898][ T5238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3793.493042][ T5238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3793.655903][ T5238] bond0 (unregistering): Released all slaves [ 3796.442607][ T5238] hsr_slave_0: left promiscuous mode [ 3796.654673][ T5238] hsr_slave_1: left promiscuous mode [ 3797.460749][ T5238] veth1_macvtap: left promiscuous mode [ 3797.482905][ T5238] veth0_macvtap: left promiscuous mode [ 3797.489802][ T5238] veth1_vlan: left promiscuous mode [ 3797.515522][ T5238] veth0_vlan: left promiscuous mode [ 3857.476649][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3857.689610][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3859.831754][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3860.154255][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3887.938972][ T5230] hsr_slave_0: entered promiscuous mode [ 3888.017192][ T5230] hsr_slave_1: entered promiscuous mode [ 3890.964394][ T5233] hsr_slave_0: entered promiscuous mode [ 3891.075212][ T5233] hsr_slave_1: entered promiscuous mode [ 3891.128823][ T5233] debugfs: 'hsr0' already exists in 'hsr' [ 3891.192418][ T5233] Cannot create hsr debugfs directory [ 3912.494227][ T5230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3913.388965][ T5230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3914.123466][ T5230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3914.843999][ T5230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3921.214185][ T5233] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3921.784141][ T5233] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3922.289530][ T5233] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3922.875561][ T5233] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3950.486107][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3957.615674][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4114.439165][ T5230] veth0_vlan: entered promiscuous mode [ 4115.586057][ T5230] veth1_vlan: entered promiscuous mode [ 4120.074745][ T5230] veth0_macvtap: entered promiscuous mode [ 4120.703601][ T5233] veth0_vlan: entered promiscuous mode [ 4121.158030][ T5230] veth1_macvtap: entered promiscuous mode [ 4122.979836][ T5233] veth1_vlan: entered promiscuous mode [ 4127.123719][ T4573] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4127.153042][ T4573] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4127.174699][ T4575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4127.185771][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4129.032800][ T5233] veth0_macvtap: entered promiscuous mode [ 4130.973186][ T5233] veth1_macvtap: entered promiscuous mode [ 4137.838382][ T3414] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4137.867148][ T3414] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4137.945735][ T3414] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4137.964291][ T3414] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4255.665881][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4258.144587][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4260.383226][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4262.706259][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4299.526493][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4299.907052][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4300.059813][ T49] bond0 (unregistering): Released all slaves [ 4301.518073][ T49] hsr_slave_0: left promiscuous mode [ 4301.584436][ T49] hsr_slave_1: left promiscuous mode [ 4302.096612][ T49] veth1_macvtap: left promiscuous mode [ 4302.109712][ T49] veth0_macvtap: left promiscuous mode [ 4302.133502][ T49] veth1_vlan: left promiscuous mode [ 4302.143233][ T49] veth0_vlan: left promiscuous mode [ 4338.885452][ T4203] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4340.619881][ T4203] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4343.103614][ T4203] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4344.753104][ T4203] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4369.909578][ T4203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4370.087344][ T4203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4370.146140][ T4203] bond0 (unregistering): Released all slaves [ 4372.345264][ T4203] hsr_slave_0: left promiscuous mode [ 4372.471919][ T4203] hsr_slave_1: left promiscuous mode [ 4373.401702][ T4203] veth1_macvtap: left promiscuous mode [ 4373.417486][ T4203] veth0_macvtap: left promiscuous mode [ 4373.472729][ T4203] veth1_vlan: left promiscuous mode [ 4373.486475][ T4203] veth0_vlan: left promiscuous mode [ 4402.755595][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4403.284308][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4425.609255][ T5519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4426.093096][ T5519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4439.077047][ T5507] hsr_slave_0: entered promiscuous mode [ 4439.235649][ T5507] hsr_slave_1: entered promiscuous mode [ 4463.592088][ T5507] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4465.442947][ T5507] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4466.729793][ T5519] hsr_slave_0: entered promiscuous mode [ 4466.845458][ T5519] hsr_slave_1: entered promiscuous mode [ 4466.936491][ T5519] debugfs: 'hsr0' already exists in 'hsr' [ 4466.971809][ T5519] Cannot create hsr debugfs directory [ 4466.987179][ T5507] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4467.418605][ T5507] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4488.693986][ T5519] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4489.256062][ T5519] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4489.794152][ T5519] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4490.387680][ T5519] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4503.528314][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4532.233059][ T5519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4680.418541][ T5507] veth0_vlan: entered promiscuous mode [ 4681.855111][ T5507] veth1_vlan: entered promiscuous mode [ 4686.227236][ T5507] veth0_macvtap: entered promiscuous mode [ 4687.056220][ T5507] veth1_macvtap: entered promiscuous mode [ 4691.852615][ T5527] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4691.878715][ T4572] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4691.885802][ T4822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4692.146105][ T5038] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4716.857402][ T5519] veth0_vlan: entered promiscuous mode [ 4718.659744][ T5519] veth1_vlan: entered promiscuous mode [ 4724.437772][ T5519] veth0_macvtap: entered promiscuous mode [ 4725.464540][ T5519] veth1_macvtap: entered promiscuous mode [ 4730.649833][ T3798] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4730.694870][ T4967] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4730.798941][ T5038] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4730.812820][ T5038] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5007.093727][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5007.763487][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5022.799517][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5023.412036][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5072.501166][ T5812] hsr_slave_0: entered promiscuous mode [ 5072.734606][ T5812] hsr_slave_1: entered promiscuous mode [ 5072.836114][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 5072.905561][ T5812] Cannot create hsr debugfs directory [ 5091.628903][ T5817] hsr_slave_0: entered promiscuous mode [ 5091.727376][ T5817] hsr_slave_1: entered promiscuous mode [ 5091.875087][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 5091.891706][ T5817] Cannot create hsr debugfs directory [ 5141.695682][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5145.514159][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5146.623233][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5150.512629][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5168.415070][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5169.238743][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5170.084139][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 5170.748116][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 5209.475937][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5224.957809][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5257.605422][ T27] INFO: task syz.8.366:5797 blocked for more than 430 seconds. [ 5257.661798][ T27] Not tainted syzkaller #0 [ 5257.676588][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 5257.677249][ T27] task:syz.8.366 state:D stack:0 pid:5797 tgid:5797 ppid:5507 task_flags:0x400040 flags:0x00000019 [ 5257.678750][ T27] Call trace: [ 5257.679275][ T27] __switch_to+0x584/0xb20 (T) [ 5257.792259][ T27] __schedule+0x1eec/0x33a4 [ 5257.835338][ T27] schedule+0xac/0x27c [ 5257.836091][ T27] schedule_timeout+0x5c/0x1e4 [ 5257.836569][ T27] do_wait_for_common+0x28c/0x444 [ 5257.837084][ T27] wait_for_completion+0x44/0x5c [ 5257.837577][ T27] __synchronize_srcu+0x2a4/0x320 [ 5257.838065][ T27] synchronize_srcu+0x3cc/0x4f0 [ 5257.838527][ T27] mmu_notifier_unregister+0x320/0x42c [ 5257.839076][ T27] kvm_put_kvm+0x6a0/0xfa8 [ 5257.839517][ T27] kvm_vm_release+0x58/0x78 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5257.921392][ T27] __fput+0x4ac/0x980 [ 5257.922077][ T27] ____fput+0x20/0x58 [ 5257.922563][ T27] task_work_run+0x1bc/0x254 [ 5257.923021][ T27] do_notify_resume+0x1bc/0x270 [ 5257.923532][ T27] el0_svc+0xb8/0x164 [ 5257.923983][ T27] el0t_64_sync_handler+0x84/0x12c [ 5257.924428][ T27] el0t_64_sync+0x198/0x19c [ 5257.925998][ T27] [ 5257.925998][ T27] Showing all locks held in the system: [ 5257.926496][ T27] 1 lock held by khungtaskd/27: [ 5257.926895][ T27] #0: ffff800087806858 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 5257.929292][ T27] 3 locks held by kworker/u4:4/49: [ 5258.081488][ T27] 2 locks held by getty/3178: [ 5258.082251][ T27] #0: 48f0000011d0a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 5258.084144][ T27] #1: 67ff80008c54b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x310/0x12b8 [ 5258.085859][ T27] 2 locks held by syz-executor/3309: [ 5258.086198][ T27] 3 locks held by kworker/u4:0/3798: [ 5258.086547][ T27] 3 locks held by kworker/u4:12/5038: [ 5258.086891][ T27] 2 locks held by kworker/u4:2/5238: [ 5258.087235][ T27] #0: 9bf000000cc20948 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7c8/0x1a18 [ 5258.088947][ T27] #1: ffff80008cde7c78 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x1a18 [ 5258.254775][ T27] 3 locks held by kworker/u4:15/5527: [ 5258.255214][ T27] 2 locks held by kworker/u4:14/5685: [ 5258.255568][ T27] 2 locks held by syz.9.365/5793: [ 5258.255903][ T27] 2 locks held by syz-executor/5812: [ 5258.256214][ T27] 3 locks held by kworker/u4:13/5823: [ 5258.256609][ T27] 1 lock held by modprobe/5979: [ 5258.256955][ T27] 4 locks held by dhcpcd-run-hook/5980: [ 5258.311962][ T27] [ 5258.312541][ T27] ============================================= [ 5258.312541][ T27] [ 5258.313377][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 5258.318086][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 5258.319524][ T27] Hardware name: linux,dummy-virt (DT) [ 5258.320423][ T27] Call trace: [ 5258.321254][ T27] show_stack+0x2c/0x3c (C) [ 5258.322239][ T27] __dump_stack+0x30/0x40 [ 5258.323094][ T27] dump_stack_lvl+0x30/0x12c [ 5258.323993][ T27] dump_stack+0x1c/0x28 [ 5258.324790][ T27] vpanic+0x22c/0x59c [ 5258.325681][ T27] vpanic+0x0/0x59c [ 5258.326494][ T27] hung_task_panic+0x0/0x2c [ 5258.327354][ T27] kthread+0x794/0x9a0 [ 5258.328204][ T27] ret_from_fork+0x10/0x20 [ 5258.330072][ T27] Kernel Offset: disabled [ 5258.330832][ T27] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 5258.332017][ T27] Memory Limit: none [ 5258.334280][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:19:12 Registers: info registers vcpu 0 CPU#0 PC=ffff800085a0755c X00=0000000000000004 X01=ffff8000870e1ac4 X02=0000000000000000 X03=ffff800085a0747c X04=0000000000000000 X05=0000000000000000 X06=0000000000000000 X07=0000000000000000 X08=0000000000000021 X09=0000000000000000 X10=0000000000ff0100 X11=0202000a4e2c0640 X12=0df00000142c8070 X13=000000000000000d X14=ffffffffffffffff X15=ffff800080007680 X16=ffff800080010e20 X17=0000000000000045 X18=00000000000000ff X19=0000000000000018 X20=0000000000000000 X21=0df00000142c8028 X22=000000000000004c X23=0000000000000000 X24=0df00000142c8000 X25=ffff800080007988 X26=ffff800080007a20 X27=08f0000010dac000 X28=000000000000000d X29=ffff8000800079a0 X30=ffff800085a089f8 SP=ffff800080007980 PSTATE=40402009 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000ffff918c90c0:0000ffff918fb370 Z01=0000ffff918c9b30:0000ffff918ca060 Z02=0000ffff916136e0:0000ffff916130d0 Z03=0000ffff918fad10:0000ffff918c9600 Z04=0000ffff918caad0:0000ffff918ca5a0 Z05=0000ffff916136e0:0000ffff916130d0 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000