last executing test programs: 7m17.29511622s ago: executing program 1 (id=114): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) (async, rerun: 32) munmap(&(0x7f0000f7c000/0x2000)=nil, 0x2000) (rerun: 32) munmap(&(0x7f0000e51000/0x4000)=nil, 0x4000) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r2, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x2000007, 0x30d2a4fbfbea96b8, 0xffffffffffffffff, 0x0) (async, rerun: 64) munmap(&(0x7f0000f01000/0x4000)=nil, 0x4000) (async, rerun: 64) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) (async) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) (async) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$arm64(r4, &(0x7f0000000180)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000200)=@arm64_core={0x603000000010002a, &(0x7f0000000000)=0xc0}) 7m11.140699533s ago: executing program 1 (id=116): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x4, 0x220) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_kvm_vgic_v3_setup(r2, 0x3, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x4, &(0x7f0000000040)=0x7f}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x5, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$arm64(r13, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}, @its_send_cmd={0xaa, 0x28, {0x8, 0x0, 0x2, 0x400009, 0x0, 0x80}}], 0x50}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r14, &(0x7f00000007c0)={0x0, &(0x7f0000000300)=[@mrs={0xbe, 0x18, {0x6030000000138056}}, @uexit={0x0, 0x18, 0x1}, @eret={0xe6, 0x18, 0x400}, @eret={0xe6, 0x18, 0x9}, @msr={0x14, 0x20, {0x603000000013e710, 0x100}}, @irq_setup={0x46, 0x18, {0x1, 0x345}}, @irq_setup={0x46, 0x18, {0x0, 0x30b}}, @hvc={0x32, 0x40, {0x84000012, [0x3, 0xba, 0x7, 0x8, 0x2]}}, @uexit={0x0, 0x18, 0x100000000}, @irq_setup={0x46, 0x18, {0x0, 0x2d5}}, @hvc={0x32, 0x40, {0x84000011, [0x0, 0x4, 0x1, 0xb, 0x3]}}, @memwrite={0x6e, 0x30, @generic={0x10000, 0xb4c, 0x3}}, @smc={0x1e, 0x40, {0x84000050, [0x4, 0x7fff, 0x8c, 0x800, 0x2]}}, @svc={0x122, 0x40, {0x20, [0xbbc9, 0x80000001, 0x5, 0xf5f1, 0x100000001]}}, @uexit={0x0, 0x18, 0x6}, @hvc={0x32, 0x40, {0x8400000e, [0x3, 0x100000001, 0x7d0462f2, 0x3, 0x2]}}, @uexit={0x0, 0x18}, @irq_setup={0x46, 0x18, {0x0, 0xad}}, @hvc={0x32, 0x40, {0x80000000, [0x0, 0x1, 0x7fffffff, 0x2, 0x100000000000000]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x1, 0x4, 0x9, 0x3, 0x401, 0x2}}, @eret={0xe6, 0x18, 0xb}, @uexit={0x0, 0x18, 0x6}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x1000, 0x1}}, @code={0xa, 0x6c, {"e02089d200c0b0f2e10180d2220180d2430180d2c40080d2020000d4009899d20000b8f2210180d2a20080d2e30080d2e40180d2020000d40004809a008008d5007008d50040211e0000001c007008d5007008d5000000d2"}}, @mrs={0xbe, 0x18, {0x603000000013c609}}, @hvc={0x32, 0x40, {0xc4000005, [0x8, 0xffffffffffffffff, 0x2, 0xb, 0x1]}}, @svc={0x122, 0x40, {0x3f000000, [0x2, 0x3, 0x5, 0x2, 0xf6]}}, @mrs={0xbe, 0x18, {0x603000000013de94}}, @msr={0x14, 0x20, {0x603000000013df5e, 0x7}}], 0x49c}, &(0x7f0000000800)=[@featur2={0x1, 0x2}], 0x1) syz_kvm_vgic_v3_setup(r13, 0x1, 0x100) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000002c0)=@attr_arm64={0x0, 0x8, 0x0, &(0x7f0000000280)=0xffffffffffffffff}) 7m9.675190914s ago: executing program 0 (id=117): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0x4020940d, 0xfffffffffffff4c2) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_kvm_setup_cpu$arm64(r6, r7, &(0x7f0000009000/0x400000)=nil, &(0x7f0000000000)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, 0x0, 0x30}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r12, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async) r13 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) (async) r14 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r14, 0x20, &(0x7f00000000c0)="d5f5f543d3681d26b4d9f0ffffffff7b41445c085486580143226c0ead9a1620ba24f023314cc4bf610d6a743ad4913923b8364e5f73ea2fc43ac1abfc00", 0x0, 0xffffffffffffff32) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000140)={0xc, 0xfff9, 0x1}}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, &(0x7f0000000140)={0xc, 0xfff9, 0x1}}) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x4}) (async) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x4}) 6m46.202486574s ago: executing program 1 (id=118): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_CAP_ARM_MTE(r3, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r2, 0x400454ca, 0xd8ffffffffff0f00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) 6m46.201553774s ago: executing program 0 (id=119): mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000000)=0xe}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r7, 0x2, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r10, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0xf, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) 6m39.104708097s ago: executing program 1 (id=120): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) close(r0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x1, 0x6}}) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0xf58, 0x3, &(0x7f0000000080)=0x2}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x8000, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000340)={0x0, &(0x7f0000000180)=[@its_setup={0x82, 0x28, {0x0, 0x3, 0x230}}, @msr={0x14, 0x20, {0x603000000013c521, 0x10}}, @smc={0x1e, 0x40, {0x400, [0xfdd3, 0x5, 0x9, 0xb8, 0x9]}}, @hvc={0x32, 0x40, {0xc4000011, [0xfff, 0x9, 0x2, 0xb0ae, 0x7ff]}}, @code={0xa, 0xb4, {"000020abc08090d20020b8f2c10180d2820080d2230180d2240080d2020000d460049dd20020b0f2610180d2220080d2830180d2640080d2020000d40000200a007008d50040a00d0000231e80e59ad200a0b8f2c10080d2420180d2630180d2440080d2020000d4a0928cd20020b8f2a10180d2a20180d2830080d2c40080d2020000d4201985d200a0b0f2810180d2020180d2c30180d2440080d2020000d4"}}, @hvc={0x32, 0x40, {0x31000000, [0xf148, 0x3, 0x3, 0x3, 0x40]}}], 0x1bc}, &(0x7f0000000380)=[@featur2={0x1, 0x7d}], 0x1) close(r4) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000003c0)={0xdf, 0x0, 0x3000}) r5 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000440)={0x2, 0x8}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000480)={0xa8, 0x0, 0x1}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000500)={0xdf, 0x0, 0x14000}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xa) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000580)={0xa8, 0x0, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x4f02, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000a40)={0x5, 0x100, 0x340, &(0x7f0000000640)=[0x2, 0x2, 0x7ff, 0x2, 0x4, 0x3a, 0x8, 0x6, 0x3, 0x5, 0x4, 0xeb0, 0x8a, 0x0, 0x3, 0x4, 0x4, 0x0, 0x5, 0xda, 0x5, 0x975e, 0x10001, 0x6, 0x7fff, 0xa9a3, 0x2, 0xfffffffffffffff5, 0x8001, 0xaa, 0x6, 0x5, 0x5, 0xc, 0x4, 0x2, 0x8, 0x5, 0x10001, 0x9, 0x1000, 0x9797, 0x1400, 0x1, 0xfffffffffffffc00, 0x6, 0x10001, 0x7, 0x6, 0xc, 0x7, 0x9, 0x3000000, 0x7, 0x10, 0xe, 0xef, 0xfff, 0x0, 0x9, 0x6, 0x0, 0xd436, 0x5, 0x3, 0x6, 0xfff, 0x0, 0x100000001, 0x3, 0x80, 0x92, 0xa, 0x1, 0x2, 0x8, 0x8, 0xffffffffffff0a04, 0x37, 0x5, 0x7, 0x70d, 0x8, 0x1, 0x5a71, 0xe, 0x3, 0x7, 0xd32, 0xd2, 0x101, 0x80000000, 0xcb, 0x8000, 0x6170, 0x7fffffffffffffff, 0x3, 0xe, 0x749, 0xdc5, 0xfffffffffffffffc, 0xa, 0x9, 0xffffffffffffffba, 0x0, 0x1, 0x3ff, 0x75, 0xfffffffffffffffd, 0x2, 0x4, 0xa, 0xc0000, 0x1, 0x4d, 0x2, 0x1000, 0x80000000, 0x5, 0x5, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x7fffffff, 0x58, 0x7f]}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xb) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000a80)={0x10004, 0x0, &(0x7f0000fe4000/0x1000)=nil}) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) r10 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) ioctl$KVM_CAP_ARM_MTE(r10, 0x4068aea3, &(0x7f0000000ac0)) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000b80)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000b40)=0x1c}) ioctl$KVM_PPC_ALLOCATE_HTAB(r6, 0xc004aea7, &(0x7f0000000bc0)=0x9) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000c40)=@arm64_ccsidr={0x6020000000110001, &(0x7f0000000c00)=0x5}) 6m36.000450596s ago: executing program 0 (id=121): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r4, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r7, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x1, 0xffffffffffffffff, 0x3}) ioctl$KVM_CREATE_VM(r9, 0x401c5820, 0x20000001) 6m30.514578284s ago: executing program 1 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0x4b47, 0xfffffffffffffffe) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve={0x6080000000150377, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_vgic_v3_setup(r5, 0x4, 0x100) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f00000000c0)=@attr_arm64={0x0, 0x3, 0x5}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) r10 = ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x4000}) r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r12, 0x4010aeac, &(0x7f00000001c0)=@arm64_fp_extra={0x60200000001000d4, &(0x7f0000000100)=0x7}) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r15, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CLEAR_DIRTY_LOG(r15, 0xc018aec0, &(0x7f0000000000)={0x1, 0x300, 0x2c0, 0x0}) r16 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r17 = syz_kvm_vgic_v3_setup(r16, 0x1, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r17, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, 0x0}) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r19, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6m25.154842439s ago: executing program 0 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@mrs={0xbe, 0x18, {0x603000000013808c}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x8080000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = eventfd2(0x0, 0x80000) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r8, 0x2, 0x100) (async) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r6, 0x3}) (async) syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 6m3.897487802s ago: executing program 1 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x6, 0x0}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000540)=[@hvc={0x32, 0x40, {0x5000000, [0x4, 0x6, 0x2, 0x8, 0x100]}}, @hvc={0x32, 0x40, {0xc4000014, [0xffffffff7fffffff, 0xfffffffffffffe01, 0x100000000, 0x4, 0x679]}}, @irq_setup={0x46, 0x18, {0x4, 0x25a}}, @code={0xa, 0x6c, {"00a0ff0d20fe99d200e0b8f2a10180d2e20180d2e30180d2e40180d2020000d4007008d5007008d5007008d5005f9fd200c0b0f2210180d2620080d2830080d2c40180d2020000d4000028d5000028d5000028d50060600d"}}, @irq_setup={0x46, 0x18, {0x0, 0x37}}, @uexit={0x0, 0x18, 0x5}], 0x134}, 0x0, 0x0) (async, rerun: 32) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) (async) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x33) syz_kvm_vgic_v3_setup(r15, 0x1, 0x100) (async) ioctl$KVM_SIGNAL_MSI(r15, 0x4020aea5, &(0x7f0000000140)={0x1, 0xdddcb001, 0x0, 0x2000000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000240)=0x8}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r17, 0xaec7) (async) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000000)=@arm64_bitmap={0x6030000000160006, 0x0}) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa) 6m3.559857674s ago: executing program 0 (id=125): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20000000021) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@msr={0x14, 0x20, {0x603000000013c4f1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013c4f2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce0, 0x7ffc}}, @msr={0x14, 0x20, {0x603000000013dce1, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce2, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce3, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce5, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce8, 0x8000}}, @msr={0x14, 0x20, {0x603000000013dce9, 0x8000}}], 0x120}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x7}) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m55.962167404s ago: executing program 0 (id=126): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7}) 5m17.293379727s ago: executing program 32 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x0, 0x6, 0x0}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2f) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r9 = syz_kvm_add_vcpu$arm64(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000540)=[@hvc={0x32, 0x40, {0x5000000, [0x4, 0x6, 0x2, 0x8, 0x100]}}, @hvc={0x32, 0x40, {0xc4000014, [0xffffffff7fffffff, 0xfffffffffffffe01, 0x100000000, 0x4, 0x679]}}, @irq_setup={0x46, 0x18, {0x4, 0x25a}}, @code={0xa, 0x6c, {"00a0ff0d20fe99d200e0b8f2a10180d2e20180d2e30180d2e40180d2020000d4007008d5007008d5007008d5005f9fd200c0b0f2210180d2620080d2830080d2c40180d2020000d4000028d5000028d5000028d50060600d"}}, @irq_setup={0x46, 0x18, {0x0, 0x37}}, @uexit={0x0, 0x18, 0x5}], 0x134}, 0x0, 0x0) (async, rerun: 32) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) (async) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x33) syz_kvm_vgic_v3_setup(r15, 0x1, 0x100) (async) ioctl$KVM_SIGNAL_MSI(r15, 0x4020aea5, &(0x7f0000000140)={0x1, 0xdddcb001, 0x0, 0x2000000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000240)=0x8}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) (async) r16 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r17, 0xaec7) (async) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000000)=@arm64_bitmap={0x6030000000160006, 0x0}) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa) 5m9.793969919s ago: executing program 33 (id=126): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000100)=@arm64_bitmap={0x6030000000140003, &(0x7f0000000000)=0x7}) 46.9436518s ago: executing program 2 (id=127): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x23) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x3000}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x800, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100018, &(0x7f0000000100)=0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, 0x0) (async) r9 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0x84000015, [0xf6, 0x100, 0xffffffffffffffff, 0xee24, 0xfffffffffffeffff]}}], 0x40}, &(0x7f0000000280)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 34.432393163s ago: executing program 2 (id=129): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$arm64(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x0, 0x200008000000001}}, @its_send_cmd={0xaa, 0x28, {0x4, 0x0, 0x2, 0x1, 0xffffffff}}], 0x50}, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$arm64(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000000)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000140)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x7}) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x1, 0xf, '\x00', 0xfffffffffffff105}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 20.874289726s ago: executing program 3 (id=128): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r3, 0x4020aeae, &(0x7f0000000000)={0x5, 0x18}) (async) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0xc3) (async) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f0000000940)=@attr_arm64={0x0, 0x0, 0x4, 0x0}) (async) r9 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000200)={0x0, &(0x7f0000000500)=[@mrs={0xbe, 0x18, {0x6030000000138056}}], 0x18}, 0x0, 0x0) (async) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x3) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) (async) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000100)={0x7}) (async) r13 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r14, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000080)={0x0, &(0x7f0000000980)=[@hvc={0x32, 0x40, {0x84000011, [0x3, 0xcbd, 0x4, 0x7, 0x6]}}, @irq_setup={0x46, 0x18, {0x4, 0x15}}, @uexit={0x0, 0x18, 0x38000000000}, @msr={0x14, 0x20, {0x0, 0xffff}}, @hvc={0x32, 0x40, {0x84000053, [0x4, 0xfffffffffffffffb, 0x4, 0x97, 0x34a0]}}, @its_setup={0x82, 0x28, {0x3, 0x40008, 0x255}}, @its_setup={0x82, 0x28, {0x2, 0x0, 0x98}}, @irq_setup={0x46, 0x18, {0xffffffff, 0x3a0}}, @msr={0x14, 0x20, {0x603000000013c00f, 0x4}}, @eret={0xe6, 0x18, 0x8000000000}, @hvc={0x32, 0x40, {0x1000000, [0x6, 0x8, 0x7, 0x8000000000000001, 0x6]}}, @smc={0x1e, 0x40, {0x84000000, [0x0, 0x3, 0x5, 0x1000, 0x5]}}], 0x1f0}, &(0x7f0000000300)=[@featur2={0x1, 0x40}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r15, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_RUN(r15, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x10, 0x3, 0xf, '\x00', 0xfffffffffffff106}) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9e, 0x7fffffff, 0x2}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x92000, 0x0) 16.731955866s ago: executing program 2 (id=130): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000f06000/0x10000)=nil, 0x0, 0x1000004, 0x30, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x1000002, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, r4, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0x40086602, 0x110e22ffff) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000dee000/0x1000)=nil, 0x930, 0x100000c, 0x8032, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x8, 0x8) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f0000000000)="37d3116035d7513e9a000200018000", 0x0, 0x43) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x40086602, 0x20000000) ioctl$KVM_CHECK_EXTENSION(r6, 0x40086602, 0x110e227ffe) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x28) r9 = syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$arm64(r9, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=[@featur2={0x1, 0x2}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@smc={0x1e, 0xffffffffffffffcd, {0x84000053, [0x80000000000, 0x6, 0x1ff, 0x6f4, 0x1]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x401) 6.462968504s ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000b80)={0x0, &(0x7f00000009c0)=[@hvc={0x32, 0x40, {0xc4000004, [0x4, 0xfffffffffffffffa, 0x8000000000000000, 0x427f, 0x400003]}}], 0x40}, &(0x7f0000000bc0)=[@featur1={0x1, 0x4}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=132): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r2, 0x3, 0xa0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f0000000180)}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@arm64={0x6, 0x4, 0x2, '\x00', 0x7}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r8, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x17) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) r13 = syz_kvm_add_vcpu$arm64(r12, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r11, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0xb, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r14, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) r15 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) r16 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r15, 0x3, 0x11, r13, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000200)={0x8090040, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r16, 0xfffffffffffffffe) r17 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r17, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x6000, 0x4, 0xa}}], 0x30}, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 378.560367][ T3157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.342064][ T3157] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:41971' (ED25519) to the list of known hosts. [ 590.973574][ T25] audit: type=1400 audit(590.180:61): avc: denied { name_bind } for pid=3314 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 591.918553][ T25] audit: type=1400 audit(591.130:62): avc: denied { execute } for pid=3315 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 591.943758][ T25] audit: type=1400 audit(591.140:63): avc: denied { execute_no_trans } for pid=3315 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 614.957315][ T25] audit: type=1400 audit(614.160:64): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 614.999950][ T25] audit: type=1400 audit(614.190:65): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 615.176112][ T3315] cgroup: Unknown subsys name 'net' [ 615.268829][ T25] audit: type=1400 audit(614.480:66): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 615.711788][ T3315] cgroup: Unknown subsys name 'cpuset' [ 615.812434][ T3315] cgroup: Unknown subsys name 'rlimit' [ 616.737845][ T25] audit: type=1400 audit(615.940:67): avc: denied { setattr } for pid=3315 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 616.763263][ T25] audit: type=1400 audit(615.960:68): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 616.781891][ T25] audit: type=1400 audit(615.990:69): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 617.959333][ T3318] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 617.980196][ T25] audit: type=1400 audit(617.180:70): avc: denied { relabelto } for pid=3318 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 618.008538][ T25] audit: type=1400 audit(617.210:71): avc: denied { write } for pid=3318 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 618.182166][ T25] audit: type=1400 audit(617.390:72): avc: denied { read } for pid=3315 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 618.200308][ T25] audit: type=1400 audit(617.400:73): avc: denied { open } for pid=3315 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 618.248063][ T3315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 667.885680][ T25] audit: type=1400 audit(667.070:74): avc: denied { execmem } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 672.656306][ T25] audit: type=1400 audit(671.860:75): avc: denied { read } for pid=3321 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 672.677317][ T25] audit: type=1400 audit(671.880:76): avc: denied { open } for pid=3321 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 672.752975][ T25] audit: type=1400 audit(671.960:77): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 673.023081][ T25] audit: type=1400 audit(672.230:78): avc: denied { module_request } for pid=3321 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 673.041897][ T25] audit: type=1400 audit(672.250:79): avc: denied { module_request } for pid=3322 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 674.110443][ T25] audit: type=1400 audit(673.320:80): avc: denied { sys_module } for pid=3321 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 698.904276][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.335539][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.177941][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.720563][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.437909][ T3322] hsr_slave_0: entered promiscuous mode [ 715.468441][ T3322] hsr_slave_1: entered promiscuous mode [ 716.282454][ T3321] hsr_slave_0: entered promiscuous mode [ 716.331774][ T3321] hsr_slave_1: entered promiscuous mode [ 716.377702][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 716.381757][ T3321] Cannot create hsr debugfs directory [ 721.736828][ T25] audit: type=1400 audit(720.940:81): avc: denied { create } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.787214][ T25] audit: type=1400 audit(720.990:82): avc: denied { write } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.858114][ T25] audit: type=1400 audit(721.020:83): avc: denied { read } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 722.001217][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.413596][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.629877][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.822671][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.646724][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.864220][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 725.083965][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 725.331087][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 737.084059][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.904161][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.569098][ T3322] veth0_vlan: entered promiscuous mode [ 799.929998][ T3322] veth1_vlan: entered promiscuous mode [ 801.709795][ T3322] veth0_macvtap: entered promiscuous mode [ 802.169394][ T3322] veth1_macvtap: entered promiscuous mode [ 802.481021][ T3321] veth0_vlan: entered promiscuous mode [ 803.171276][ T3321] veth1_vlan: entered promiscuous mode [ 804.658823][ T3370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.712279][ T3370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.720928][ T3370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.808388][ T3370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.850309][ T3321] veth0_macvtap: entered promiscuous mode [ 806.417697][ T3321] veth1_macvtap: entered promiscuous mode [ 807.138159][ T25] audit: type=1400 audit(806.340:84): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 807.319745][ T25] audit: type=1400 audit(806.490:85): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/syzkaller.aZwtMx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 807.486546][ T25] audit: type=1400 audit(806.690:86): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 808.121268][ T25] audit: type=1400 audit(807.320:87): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/syzkaller.aZwtMx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 808.281742][ T25] audit: type=1400 audit(807.490:88): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/syzkaller.aZwtMx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 808.726769][ T25] audit: type=1400 audit(807.930:89): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 808.748517][ T3290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.831805][ T3290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.836501][ T3290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.850851][ T3290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.077275][ T25] audit: type=1400 audit(808.280:90): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 809.192794][ T25] audit: type=1400 audit(808.400:91): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 809.629460][ T25] audit: type=1400 audit(808.830:92): avc: denied { mount } for pid=3322 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 809.702820][ T25] audit: type=1400 audit(808.870:93): avc: denied { mounton } for pid=3322 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 811.250735][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 812.159013][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 812.159832][ T25] audit: type=1400 audit(811.330:95): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.160707][ T25] audit: type=1400 audit(811.330:96): avc: denied { open } for pid=3322 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.208711][ T25] audit: type=1400 audit(811.330:97): avc: denied { ioctl } for pid=3322 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=639 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 821.577564][ T25] audit: type=1400 audit(820.760:98): avc: denied { read } for pid=3478 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 821.676978][ T25] audit: type=1400 audit(820.880:99): avc: denied { open } for pid=3478 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 822.508723][ T25] audit: type=1400 audit(821.570:100): avc: denied { ioctl } for pid=3478 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 825.087063][ T25] audit: type=1400 audit(824.290:101): avc: denied { append } for pid=3480 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 843.967723][ T25] audit: type=1400 audit(843.110:102): avc: denied { setattr } for pid=3497 comm="syz.0.6" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 856.873640][ T25] audit: type=1400 audit(856.080:103): avc: denied { execute } for pid=3508 comm="syz.0.9" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 872.756262][ T25] audit: type=1400 audit(871.950:104): avc: denied { write } for pid=3522 comm="syz.1.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1003.851142][ T3610] debugfs: 'vgic-its-state@8080000' already exists in '3606-4' [ 1024.356971][ T25] audit: type=1400 audit(1023.530:105): avc: denied { execute } for pid=3622 comm="syz.1.49" path="/24/T" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1090.030835][ T25] audit: type=1400 audit(1089.190:106): avc: denied { ioctl } for pid=3669 comm="syz.0.63" path="net:[4026532629]" dev="nsfs" ino=4026532629 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1366.488312][ T3832] kvm [3832]: Failed to find VMA for hva 0x20de0000 [ 1533.763187][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.069837][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.349637][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.919497][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.982739][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.138056][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.214056][ T12] bond0 (unregistering): Released all slaves [ 1555.329858][ T12] hsr_slave_0: left promiscuous mode [ 1555.569202][ T12] hsr_slave_1: left promiscuous mode [ 1556.186373][ T12] veth1_macvtap: left promiscuous mode [ 1556.191039][ T12] veth0_macvtap: left promiscuous mode [ 1556.208177][ T12] veth1_vlan: left promiscuous mode [ 1556.224022][ T12] veth0_vlan: left promiscuous mode [ 1574.633882][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.529499][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.359189][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.630670][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.382989][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.529611][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.608052][ T12] bond0 (unregistering): Released all slaves [ 1593.947816][ T12] hsr_slave_0: left promiscuous mode [ 1594.011643][ T12] hsr_slave_1: left promiscuous mode [ 1594.556342][ T12] veth1_macvtap: left promiscuous mode [ 1594.557651][ T12] veth0_macvtap: left promiscuous mode [ 1594.567538][ T12] veth1_vlan: left promiscuous mode [ 1594.569053][ T12] veth0_vlan: left promiscuous mode [ 1607.867396][ T3896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.212295][ T3896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.824084][ T3904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.108915][ T3904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.690576][ T3896] hsr_slave_0: entered promiscuous mode [ 1632.760761][ T3896] hsr_slave_1: entered promiscuous mode [ 1644.267179][ T3896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1644.621013][ T3896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1644.940075][ T3896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1645.179150][ T3896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1647.713943][ T3904] hsr_slave_0: entered promiscuous mode [ 1647.782642][ T3904] hsr_slave_1: entered promiscuous mode [ 1647.814053][ T3904] debugfs: 'hsr0' already exists in 'hsr' [ 1647.866327][ T3904] Cannot create hsr debugfs directory [ 1660.361949][ T3904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1660.699523][ T3904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1660.946590][ T3904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1661.216502][ T3904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1667.109296][ T3896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.250491][ T3904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.618423][ T3896] veth0_vlan: entered promiscuous mode [ 1763.581253][ T3896] veth1_vlan: entered promiscuous mode [ 1766.182995][ T3896] veth0_macvtap: entered promiscuous mode [ 1766.544035][ T3896] veth1_macvtap: entered promiscuous mode [ 1769.213142][ T3698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.214301][ T3698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.264270][ T3698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.282432][ T3698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.372166][ T3904] veth0_vlan: entered promiscuous mode [ 1784.453548][ T3904] veth1_vlan: entered promiscuous mode [ 1787.948120][ T3904] veth0_macvtap: entered promiscuous mode [ 1788.819763][ T3904] veth1_macvtap: entered promiscuous mode [ 1792.357186][ T3698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.358667][ T3698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.409783][ T3698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.551214][ T3698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.472398][ T4141] ================================================================== [ 1825.473012][ T4141] BUG: KASAN: invalid-access in __kvm_pgtable_walk+0x8e4/0xa68 [ 1825.474799][ T4141] Read of size 8 at addr 6df000001d23f000 by task syz.3.131/4141 [ 1825.475056][ T4141] Pointer tag: [6d], memory tag: [fe] [ 1825.475176][ T4141] [ 1825.476145][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT [ 1825.476687][ T4141] Hardware name: linux,dummy-virt (DT) [ 1825.477123][ T4141] Call trace: [ 1825.477498][ T4141] show_stack+0x2c/0x3c (C) [ 1825.478082][ T4141] __dump_stack+0x30/0x40 [ 1825.478337][ T4141] dump_stack_lvl+0xd8/0x12c [ 1825.478571][ T4141] print_address_description+0xac/0x288 [ 1825.478838][ T4141] print_report+0x84/0xa0 [ 1825.479109][ T4141] kasan_report+0xb0/0x110 [ 1825.479324][ T4141] kasan_tag_mismatch+0x28/0x3c [ 1825.479618][ T4141] __hwasan_tag_mismatch+0x30/0x60 [ 1825.479902][ T4141] __kvm_pgtable_walk+0x8e4/0xa68 [ 1825.480233][ T4141] kvm_pgtable_walk+0x294/0x468 [ 1825.480527][ T4141] kvm_pgtable_stage2_destroy_range+0x60/0xb4 [ 1825.480814][ T4141] kvm_free_stage2_pgd+0x198/0x28c [ 1825.481080][ T4141] kvm_uninit_stage2_mmu+0x20/0x38 [ 1825.481336][ T4141] kvm_arch_flush_shadow_all+0x1a8/0x1e0 [ 1825.481644][ T4141] kvm_mmu_notifier_release+0x48/0xa8 [ 1825.481921][ T4141] mmu_notifier_unregister+0x128/0x42c [ 1825.482175][ T4141] kvm_put_kvm+0x6a0/0xfa8 [ 1825.482383][ T4141] kvm_vm_release+0x58/0x78 [ 1825.482641][ T4141] __fput+0x4ac/0x980 [ 1825.482837][ T4141] ____fput+0x20/0x58 [ 1825.483060][ T4141] task_work_run+0x1bc/0x254 [ 1825.483279][ T4141] do_notify_resume+0x1bc/0x270 [ 1825.483543][ T4141] el0_svc+0xb8/0x164 [ 1825.483770][ T4141] el0t_64_sync_handler+0x84/0x12c [ 1825.483995][ T4141] el0t_64_sync+0x198/0x19c [ 1825.484502][ T4141] [ 1825.484675][ T4141] The buggy address belongs to the physical page: [ 1825.485760][ T4141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d23f [ 1825.486119][ T4141] flags: 0x1ffe48000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x92) [ 1825.487264][ T4141] raw: 01ffe48000000000 ffffc1ffc0749488 ffffc1ffc0748908 0000000000000000 [ 1825.487522][ T4141] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1825.487728][ T4141] page dumped because: kasan: bad access detected [ 1825.487852][ T4141] [ 1825.487938][ T4141] Memory state around the buggy address: [ 1825.488268][ T4141] fff000001d23ee00: ed ed ed ed ed ed ed ed ed ed ed ed ed ed ed ed [ 1825.488477][ T4141] fff000001d23ef00: ed ed ed ed ed ed ed ed ed ed ed ed ed ed ed ed [ 1825.488667][ T4141] >fff000001d23f000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1825.488798][ T4141] ^ [ 1825.489024][ T4141] fff000001d23f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1825.489190][ T4141] fff000001d23f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1825.489394][ T4141] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1825.936483][ T4141] Disabling lock debugging due to kernel taint [ 1825.946815][ T4141] Unable to handle kernel paging request at virtual address fffec4941065a501 [ 1825.947514][ T4141] KASAN: probably wild-memory-access in range [0xfff44941065a5010-0xfff44941065a501f] [ 1825.947872][ T4141] Mem abort info: [ 1825.948081][ T4141] ESR = 0x0000000096000004 [ 1825.948372][ T4141] EC = 0x25: DABT (current EL), IL = 32 bits [ 1825.948677][ T4141] SET = 0, FnV = 0 [ 1825.948923][ T4141] EA = 0, S1PTW = 0 [ 1825.949158][ T4141] FSC = 0x04: level 0 translation fault [ 1825.949452][ T4141] Data abort info: [ 1825.949689][ T4141] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 1825.949965][ T4141] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1825.950244][ T4141] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1825.950722][ T4141] swapper pgtable: 4k pages, 52-bit VAs, pgdp=00000000476e2000 [ 1825.951119][ T4141] [fffec4941065a501] pgd=0000000047f43003, p4d=0000000000000000 [ 1825.952622][ T4141] Internal error: Oops: 0000000096000004 [#1] SMP [ 1825.966671][ T4141] Modules linked in: [ 1825.968441][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: syz.3.131 Tainted: G B syzkaller #0 PREEMPT [ 1825.969970][ T4141] Tainted: [B]=BAD_PAGE [ 1825.970690][ T4141] Hardware name: linux,dummy-virt (DT) [ 1825.971721][ T4141] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1825.973052][ T4141] pc : __kvm_pgtable_walk+0x268/0xa68 [ 1825.974133][ T4141] lr : __kvm_pgtable_walk+0x214/0xa68 [ 1825.975138][ T4141] sp : ffff80008e8d77d0 [ 1825.975891][ T4141] x29: ffff80008e8d7870 x28: 0000000000000005 x27: fff44941065a5010 [ 1825.977515][ T4141] x26: fff44941065a5010 x25: 0000000000000000 x24: 0000000000000001 [ 1825.978863][ T4141] x23: 00000000000000ff x22: efff800000000000 x21: ffff80008e8d79d8 [ 1825.980237][ T4141] x20: 00000000000000ff x19: 00000000000000ff x18: 0000000000001b80 [ 1825.981608][ T4141] x17: 0000000004b4692f x16: 000000008d4ed821 x15: fff0000072d7e404 [ 1825.982952][ T4141] x14: 00000000000000ff x13: ffff80008e8d79e0 x12: ffff80008e8d79e8 [ 1825.984307][ T4141] x11: ffff80008e8d79e8 x10: 0000000000ff0100 x9 : ffff80008e8d7828 [ 1825.985762][ T4141] x8 : 0fff44941065a501 x7 : ffff800080bc7058 x6 : 0000000000000000 [ 1825.987111][ T4141] x5 : 0000000000000000 x4 : 00000000000000ff x3 : 0000000000000001 [ 1825.988414][ T4141] x2 : fff44941065a5000 x1 : 0000000000000000 x0 : 0000000000000000 [ 1825.989796][ T4141] Call trace: [ 1825.990503][ T4141] __kvm_pgtable_walk+0x268/0xa68 (P) [ 1825.991546][ T4141] __kvm_pgtable_walk+0x600/0xa68 [ 1825.992399][ T4141] kvm_pgtable_walk+0x294/0x468 [ 1825.993366][ T4141] kvm_pgtable_stage2_destroy_range+0x60/0xb4 [ 1825.994487][ T4141] kvm_free_stage2_pgd+0x198/0x28c [ 1825.995430][ T4141] kvm_uninit_stage2_mmu+0x20/0x38 [ 1825.996389][ T4141] kvm_arch_flush_shadow_all+0x1a8/0x1e0 [ 1825.997394][ T4141] kvm_mmu_notifier_release+0x48/0xa8 [ 1825.998423][ T4141] mmu_notifier_unregister+0x128/0x42c [ 1825.999394][ T4141] kvm_put_kvm+0x6a0/0xfa8 [ 1826.000190][ T4141] kvm_vm_release+0x58/0x78 [ 1826.001093][ T4141] __fput+0x4ac/0x980 [ 1826.001865][ T4141] ____fput+0x20/0x58 [ 1826.002618][ T4141] task_work_run+0x1bc/0x254 [ 1826.003527][ T4141] do_notify_resume+0x1bc/0x270 [ 1826.004443][ T4141] el0_svc+0xb8/0x164 [ 1826.005286][ T4141] el0t_64_sync_handler+0x84/0x12c [ 1826.006285][ T4141] el0t_64_sync+0x198/0x19c [ 1826.007746][ T4141] Code: f94023ec f9400fed a9017d3f f800813f (38686ac8) [ 1826.009542][ T4141] ---[ end trace 0000000000000000 ]--- [ 1826.011000][ T4141] Kernel panic - not syncing: Oops: Fatal exception [ 1826.012908][ T4141] Kernel Offset: disabled [ 1826.013657][ T4141] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 1826.014743][ T4141] Memory Limit: none [ 1826.016392][ T4141] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:10:34 Registers: info registers vcpu 0 CPU#0 PC=ffff800082159154 X00=0000000000000003 X01=0000000000000002 X02=0000000000000001 X03=ffff800082159050 X04=0000000000000001 X05=0000000000000001 X06=0000000000000000 X07=ffff800081f1ef70 X08=40f000000d9b9d80 X09=0000000000000000 X10=0000000000ff0100 X11=00000000000000fe X12=0000000000000002 X13=0000000000000002 X14=0000000000000000 X15=00000000b6e604c5 X16=000000002095e9be X17=0000000000000000 X18=0000000020b08b3e X19=efff800000000000 X20=2df000000dcb4880 X21=66ff80008c4bb018 X22=0000000000000002 X23=2df000000dcb497c X24=000000000000002d X25=2df000000dcb4ac8 X26=2df000000dcb48c8 X27=000000000000002d X28=000000000000002d X29=ffff80008c4f7b40 X30=ffff800082159154 SP=ffff80008c4f7b30 PSTATE=814020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2525252525252525:2525252525252525 Z01=65642f000a732520:7325207334362e25 Z02=3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z03=000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:000f00f00f00000f Z05=3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z06=3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z07=3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffd3692d80:0000ffffd3692d80 Z17=ffffff80ffffffd0:0000ffffd3692d50 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000